PT-2019-16399 · Qualcomm · Snapdragon

Publicado 2019-11-21 · Atualizado 2020-05-06 · CVE-2019-2335

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8976, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX55, SM6150, SM7150, SM8150, SM8250, Snapdragon High Med 2016, SXR1130, SXR2130

Description The issue occurs while processing an Attach Reject message, resulting in an infinite loop due to a valid exit condition not being met. This affects various Qualcomm Snapdragon products, including Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, and Snapdragon Wearables.

Recommendations For the affected Qualcomm Snapdragon versions, there is no information about a newer version that contains a fix for this issue.

Correção

Infinite Loop

Enumeração de Fraquezas

CWE-835

Identificadores relacionados

CVE-2019-2335

Produtos afetados

Snapdragon

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2019-2335 · Nota de Segurança
• https://qualcomm.com/company/product-security/bulletins/october-2019-bulletin · Aviso do Fabricante