PT-2019-16362 · Qualcomm · Snapdragon Mobile+10

Published 2019-07-22 · Updated 2020-08-24 · CVE-2019-2292

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions (affected versions not specified)

Description The issue is related to out of bound access that can occur due to buffer copy without checking the size of input received from WLAN firmware. This affects various Qualcomm Snapdragon products, including Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, and Snapdragon Voice & Music, in a range of chipsets such as MDM9150, MDM9650, MSM8996AU, QCA6574AU, QCS405, QCS605, and several SD series chipsets.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2019-2292

Affected Products

Mdm9150

Mdm9650

Msm8996Au

Qca6574Au

Qcs405

Qcs605

Snapdragon Auto

Snapdragon Consumer Iot

Snapdragon Industrial Iot

Snapdragon Mobile

Snapdragon Voice & Music

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2019-2292 · Security Note
• https://codeaurora.org/security-bulletin/2019/06/03/june-2019-code-aurora-security-bulletin · Patch