PT-2019-16395 · Qualcomm · Qualcomm Snapdragon Compute+7

Publicado 2019-11-06 · Atualizado 2019-11-07 · CVE-2019-2331

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto versions MDM9150 through MDM9650 Qualcomm Snapdragon Compute versions QCS405 through QCS605 Qualcomm Snapdragon Consumer IOT versions MDM9150 through MDM9650 Qualcomm Snapdragon Industrial IOT versions MDM9150 through MDM9650 Qualcomm Snapdragon IoT versions MDM9150 through MDM9650 Qualcomm Snapdragon Mobile versions MSM8909W through SD 855 Qualcomm Snapdragon Voice & Music versions MDM9150 through MDM9650 Qualcomm Snapdragon Wearables versions MDM9150 through MDM9650

Description The issue is related to a possible integer overflow due to subtracting two integers without checking if the result would overflow or not. This affects various Qualcomm Snapdragon products, including Auto, Compute, Consumer IOT, Industrial IOT, IoT, Mobile, Voice & Music, and Wearables.

Recommendations For Qualcomm Snapdragon Auto versions MDM9150 through MDM9650, update to a version that includes the fix for the integer overflow issue. For Qualcomm Snapdragon Compute versions QCS405 through QCS605, update to a version that includes the fix for the integer overflow issue. For Qualcomm Snapdragon Consumer IOT versions MDM9150 through MDM9650, update to a version that includes the fix for the integer overflow issue. For Qualcomm Snapdragon Industrial IOT versions MDM9150 through MDM9650, update to a version that includes the fix for the integer overflow issue. For Qualcomm Snapdragon IoT versions MDM9150 through MDM9650, update to a version that includes the fix for the integer overflow issue. For Qualcomm Snapdragon Mobile versions MSM8909W through SD 855, update to a version that includes the fix for the integer overflow issue. For Qualcomm Snapdragon Voice & Music versions MDM9150 through MDM9650, update to a version that includes the fix for the integer overflow issue. For Qualcomm Snapdragon Wearables versions MDM9150 through MDM9650, update to a version that includes the fix for the integer overflow issue.

Correção

Integer Overflow

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

CVE-2019-2331

Produtos afetados

Qualcomm Snapdragon Auto

Qualcomm Snapdragon Compute

Qualcomm Snapdragon Consumer Iot

Qualcomm Snapdragon Industrial Iot

Qualcomm Snapdragon

Qualcomm Snapdragon Mobile

Qualcomm Snapdragon Voice & Music

Qualcomm Snapdragon Wearables

Referências · 2

• https://source.android.com/security/bulletin · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-2331 · Nota de Segurança