PT-2019-8806 · Qualcomm · Sd 855+23

Publicado 2019-06-14 · Atualizado 2019-06-17 · CVE-2018-11819

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions (affected versions not specified)

Description The issue is related to a use after problem in the WLAN function, caused by multiple ACS scan requests at the same time. This affects various Qualcomm Snapdragon products, including Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, and Snapdragon Mobile, in specific chipsets such as MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 675, SD 730, SD 820A, SD 835, SD 855, SDA660, SDX20, and SDX24.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

CVE-2018-11819

Produtos afetados

Mdm9206

Mdm9607

Mdm9640

Mdm9650

Msm8996Au

Qcs605

Sd 425

Sd 427

Sd 430

Sd 435

Sd 450

Sd 625

Sd 675

Sd 730

Sd 820A

Sd 835

Sd 855

Sda660

Sdx20

Sdx24

Snapdragon Auto

Snapdragon Consumer Iot

Snapdragon Industrial Iot

Snapdragon Mobile

Referências · 2

• https://codeaurora.org/security-bulletin/2019/05/06/may-2019-code-aurora-security-bulletin · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2018-11819 · Nota de Segurança