PT-2019-16335 · Qualcomm · Qualcomm Sd 429+39

Published 2019-06-14 · Updated 2020-08-24 · CVE-2019-2255

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto versions prior to the fixed version Qualcomm Snapdragon Compute versions prior to the fixed version Qualcomm Snapdragon Connectivity versions prior to the fixed version Qualcomm Snapdragon Consumer IOT versions prior to the fixed version Qualcomm Snapdragon Industrial IOT versions prior to the fixed version Qualcomm Snapdragon Mobile versions prior to the fixed version Qualcomm Snapdragon Voice & Music versions prior to the fixed version Qualcomm Snapdragon Wearables versions prior to the fixed version Qualcomm MSM8909W versions prior to the fixed version Qualcomm MSM8996AU versions prior to the fixed version Qualcomm QCS605 versions prior to the fixed version Qualcomm 215 versions prior to the fixed version Qualcomm SD 210 versions prior to the fixed version Qualcomm SD 212 versions prior to the fixed version Qualcomm SD 205 versions prior to the fixed version Qualcomm SD 425 versions prior to the fixed version Qualcomm SD 427 versions prior to the fixed version Qualcomm SD 430 versions prior to the fixed version Qualcomm SD 435 versions prior to the fixed version Qualcomm SD 439 versions prior to the fixed version Qualcomm SD 429 versions prior to the fixed version Qualcomm SD 450 versions prior to the fixed version Qualcomm SD 625 versions prior to the fixed version Qualcomm SD 632 versions prior to the fixed version Qualcomm SD 636 versions prior to the fixed version Qualcomm SD 675 versions prior to the fixed version Qualcomm SD 712 versions prior to the fixed version Qualcomm SD 710 versions prior to the fixed version Qualcomm SD 670 versions prior to the fixed version Qualcomm SD 730 versions prior to the fixed version Qualcomm SD 820 versions prior to the fixed version Qualcomm SD 820A versions prior to the fixed version Qualcomm SD 835 versions prior to the fixed version Qualcomm SD 845 versions prior to the fixed version Qualcomm SD 850 versions prior to the fixed version Qualcomm SD 855 versions prior to the fixed version Qualcomm SD 8CX versions prior to the fixed version Qualcomm SDA660 versions prior to the fixed version Qualcomm SDM439 versions prior to the fixed version Qualcomm SDM630 versions prior to the fixed version Qualcomm SDM660 versions prior to the fixed version Qualcomm Snapdragon High Med 2016 versions prior to the fixed version Qualcomm SXR1130 versions prior to the fixed version

Description An unprivileged user can craft a bitstream to gain code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2019-2255

Affected Products

Qualcomm 215

Qualcomm Msm8909W

Qualcomm Msm8996Au

Qualcomm Qcs605

Qualcomm Sd 205

Qualcomm Sd 210

Qualcomm Sd 212

Qualcomm Sd 425

Qualcomm Sd 427

Qualcomm Sd 429

Qualcomm Sd 430

Qualcomm Sd 435

Qualcomm Sd 439

Qualcomm Sd 450

Qualcomm Sd 625

Qualcomm Sd 632

Qualcomm Sd 636

Qualcomm Sd 670

Qualcomm Sd 675

Qualcomm Sd 710

Qualcomm Sd 712

Qualcomm Sd 730

Qualcomm Sd 820A

Qualcomm Sd 835

Qualcomm Sd 845

Qualcomm Sd 850

Qualcomm Sd 855

Qualcomm Sd 8Cx

Qualcomm Sdm660

Qualcomm Sdm630

Qualcomm Sxr1130

Qualcomm Snapdragon Auto

Qualcomm Snapdragon Compute

Qualcomm Snapdragon Connectivity

Qualcomm Snapdragon Consumer Iot

Qualcomm Snapdragon Industrial Iot

Qualcomm Snapdragon Mobile

Qualcomm Snapdragon Voice & Music

Qualcomm Snapdragon Wearables

Qualcomm Snapdragon High Med 2016

References · 2

• https://qualcomm.com/company/product-security/bulletins · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-2255 · Security Note