PT-2019-11898 · Qualcomm · Qualcomm Snapdragon

Published 2019-11-06 · Updated 2019-11-07 · CVE-2019-10505

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCS405, SD 210/SD 212/SD 205, SD 425, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Description The issue arises from out of bound access while processing a non-standard IE measurement request with length crossing past the size of frame in various Qualcomm Snapdragon products.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2019-10505

Affected Products

Qualcomm Snapdragon

References · 2

• https://source.android.com/security/bulletin · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2019-10505 · Security Note