PT-2019-16336 · Qualcomm · Sda660+47

Published 2019-06-14 · Updated 2020-08-24 · CVE-2019-2256

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto versions MDM9650 Qualcomm Snapdragon Compute versions MSM8996AU, SDM630, SDM660, SDA660 Qualcomm Snapdragon Connectivity versions QCS605, SDX55 Qualcomm Snapdragon Consumer IOT versions QCS605, SD 210/SD 212/SD 205 Qualcomm Snapdragon Industrial IOT versions QCS605, SD 210/SD 212/SD 205 Qualcomm Snapdragon Mobile versions MSM8909W, MSM8996AU, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855 Qualcomm Snapdragon Voice & Music versions SD 410, SD 615, SD 617, SD 625, SD 650, SD 652, SD 653, SD 660 Qualcomm Snapdragon Wearables versions SD 210/SD 212/SD 205, SD 410, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450 Qualcomm 215 SD 210/SD 212/SD 205 SD 425 SD 427 SD 430 SD 435 SD 439 / SD 429 SD 450 SD 625 SD 632 SD 636 SD 675 SD 712 / SD 710 / SD 670 SD 820 SD 820A SD 835 SD 845 / SD 850 SD 855 SD 8CX SXR1130

Description An unprivileged user can craft a bitstream to gain code execution in various Qualcomm Snapdragon products, including Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, and Snapdragon Wearables.

Recommendations For Qualcomm Snapdragon Auto version MDM9650, update to a newer version that contains a fix for this issue. For Qualcomm Snapdragon Compute versions MSM8996AU, SDM630, SDM660, SDA660, update to a newer version that contains a fix for this issue. For Qualcomm Snapdragon Connectivity versions QCS605, SDX55, update to a newer version that contains a fix for this issue. For Qualcomm Snapdragon Consumer IOT versions QCS605, SD 210/SD 212/SD 205, update to a newer version that contains a fix for this issue. For Qualcomm Snapdragon Industrial IOT versions QCS605, SD 210/SD 212/SD 205, update to a newer version that contains a fix for this issue. For Qualcomm Snapdragon Mobile versions MSM8909W, MSM8996AU, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, update to a newer version that contains a fix for this issue. For Qualcomm Snapdragon Voice & Music versions SD 410, SD 615, SD 617, SD 625, SD 650, SD 652, SD 653, SD 660, update to a newer version that contains a fix for this issue. For Qualcomm Snapdragon Wearables versions SD 210/SD 212/SD 205, SD 410, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, update to a newer version that contains a fix for this issue. For Qualcomm 215, update to a newer version that contains a fix for this issue. For SD 210/SD 212/SD 205, update to a newer version that contains a fix for this issue. For SD 425, update to a newer version that contains a fix for this issue. For SD 427, update to a newer version that contains a fix for this issue. For SD 430, update to a newer version that contains a fix for this issue. For SD 435, update to a newer version that contains a fix for this issue. For SD 439 / SD 429, update to a newer version that contains a fix for this issue. For SD 450, update to a newer version that contains a fix for this issue. For SD 625, update to a newer version that contains a fix for this issue. For SD 632, update to a newer version that contains a fix for this issue. For SD 636, update to a newer version that contains a fix for this issue. For SD 675, update to a newer version that contains a fix for this issue. For SD 712 / SD 710 / SD 670, update to a newer version that contains a fix for this issue. For SD 820, update to a newer version that contains a fix for this issue. For SD 820A, update to a newer version that contains a fix for this issue. For SD 835, update to a newer version that contains a fix for this issue. For SD 845 / SD 850, update to a newer version that contains a fix for this issue. For SD 855, update to a newer version that contains a fix for this issue. For SD 8CX, update to a newer version that contains a fix for this issue. For SXR1130, update to a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2019-2256

Affected Products

Msm8909W

Msm8996Au

Qcs605

Qualcomm 215

Sd 205

Sd 210

Sd 212

Sd 410

Sd 425

Sd 427

Sd 429

Sd 430

Sd 435

Sd 439

Sd 450

Sd 615

Sd 617

Sd 625

Sd 632

Sd 636

Sd 650

Sd 652

Sd 653

Sd 660

Sd 670

Sd 675

Sd 710

Sd 712

Sd 820

Sd 820A

Sd 835

Sd 845

Sd 850

Sd 855

Sd 8Cx

Sda660

Sdm630

Sdm660

Sdx55

Sxr1130

Snapdragon Auto

Snapdragon Compute

Snapdragon Connectivity

Snapdragon Consumer Iot

Snapdragon Industrial Iot

Snapdragon Mobile

Snapdragon Voice & Music

Snapdragon Wearables

References · 2

• https://qualcomm.com/company/product-security/bulletins · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-2256 · Security Note