PT-2019-8830 · Qualcomm · Snapdragon

Publicado 2019-05-24 · Atualizado 2019-05-29 · CVE-2018-11937

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions (affected versions not specified)

Description The issue is related to a lack of input validation before copying, which can lead to a buffer over read in the WLAN function. This affects various Qualcomm Snapdragon products, including Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, and Snapdragon Mobile, in a range of chipsets.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CVE-2018-11937

Produtos afetados

Snapdragon

Referências · 2

• https://codeaurora.org/security-bulletin/2019/04/01/april-2019-code-aurora-security-bulletin · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2018-11937 · Nota de Segurança