PT-2019-11937 · Qualcomm · Qualcomm Snapdragon Consumer Electronics Connectivity+9
Published
2019-12-18
·
Updated
2019-12-23
·
CVE-2019-10572
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Qualcomm Snapdragon Auto versions APQ8009 through SDM845
Qualcomm Snapdragon Compute versions APQ8009 through SDM845
Qualcomm Snapdragon Connectivity versions APQ8009 through SDM845
Qualcomm Snapdragon Consumer Electronics Connectivity versions APQ8009 through SDM845
Qualcomm Snapdragon Consumer IOT versions APQ8009 through SDM845
Qualcomm Snapdragon Industrial IOT versions APQ8009 through SDM845
Qualcomm Snapdragon IoT versions APQ8009 through SDM845
Qualcomm Snapdragon Mobile versions APQ8009 through SDM845
Qualcomm Snapdragon Voice & Music versions APQ8009 through SDM845
Qualcomm Snapdragon Wearables versions APQ8009 through SDM845
Description
The issue arises from an improper check in the video driver while processing data from video firmware, leading to an integer overflow and then a buffer overflow. This affects various Qualcomm Snapdragon products.
Recommendations
For Qualcomm Snapdragon Auto versions APQ8009 through SDM845, update the video driver to a version that includes the fix for the improper check.
For Qualcomm Snapdragon Compute versions APQ8009 through SDM845, update the video driver to a version that includes the fix for the improper check.
For Qualcomm Snapdragon Connectivity versions APQ8009 through SDM845, update the video driver to a version that includes the fix for the improper check.
For Qualcomm Snapdragon Consumer Electronics Connectivity versions APQ8009 through SDM845, update the video driver to a version that includes the fix for the improper check.
For Qualcomm Snapdragon Consumer IOT versions APQ8009 through SDM845, update the video driver to a version that includes the fix for the improper check.
For Qualcomm Snapdragon Industrial IOT versions APQ8009 through SDM845, update the video driver to a version that includes the fix for the improper check.
For Qualcomm Snapdragon IoT versions APQ8009 through SDM845, update the video driver to a version that includes the fix for the improper check.
For Qualcomm Snapdragon Mobile versions APQ8009 through SDM845, update the video driver to a version that includes the fix for the improper check.
For Qualcomm Snapdragon Voice & Music versions APQ8009 through SDM845, update the video driver to a version that includes the fix for the improper check.
For Qualcomm Snapdragon Wearables versions APQ8009 through SDM845, update the video driver to a version that includes the fix for the improper check.
Fix
Integer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Qualcomm Snapdragon Auto
Qualcomm Snapdragon Compute
Qualcomm Snapdragon Connectivity
Qualcomm Snapdragon Consumer Electronics Connectivity
Qualcomm Snapdragon Consumer Iot
Qualcomm Snapdragon Industrial Iot
Qualcomm Snapdragon
Qualcomm Snapdragon Mobile
Qualcomm Snapdragon Voice & Music
Qualcomm Snapdragon Wearables