PT-2019-16394 · Qualcomm · Qualcomm Sd 429+43

Published

2019-07-25

·

Updated

2019-08-05

·

CVE-2019-2330

CVSS v2.0

4.9

Medium

VectorAV:L/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto versions (affected versions not specified) Qualcomm Snapdragon Compute versions (affected versions not specified) Qualcomm Snapdragon Consumer IOT versions (affected versions not specified) Qualcomm Snapdragon Industrial IOT versions (affected versions not specified) Qualcomm Snapdragon Mobile versions (affected versions not specified) Qualcomm Snapdragon Voice & Music versions (affected versions not specified) Qualcomm Snapdragon Wearables versions (affected versions not specified) Qualcomm Snapdragon Wired Infrastructure and Networking versions (affected versions not specified) Qualcomm IPQ4019 versions (affected versions not specified) Qualcomm IPQ8064 versions (affected versions not specified) Qualcomm IPQ8074 versions (affected versions not specified) Qualcomm MDM9150 versions (affected versions not specified) Qualcomm MDM9640 versions (affected versions not specified) Qualcomm MDM9650 versions (affected versions not specified) Qualcomm MSM8909W versions (affected versions not specified) Qualcomm MSM8996AU versions (affected versions not specified) Qualcomm QCS405 versions (affected versions not specified) Qualcomm QCS605 versions (affected versions not specified) Qualcomm 215 versions (affected versions not specified) Qualcomm SD 425 versions (affected versions not specified) Qualcomm SD 427 versions (affected versions not specified) Qualcomm SD 430 versions (affected versions not specified) Qualcomm SD 435 versions (affected versions not specified) Qualcomm SD 439 / SD 429 versions (affected versions not specified) Qualcomm SD 450 versions (affected versions not specified) Qualcomm SD 625 versions (affected versions not specified) Qualcomm SD 632 versions (affected versions not specified) Qualcomm SD 636 versions (affected versions not specified) Qualcomm SD 665 versions (affected versions not specified) Qualcomm SD 675 versions (affected versions not specified) Qualcomm SD 712 / SD 710 / SD 670 versions (affected versions not specified) Qualcomm SD 730 versions (affected versions not specified) Qualcomm SD 820A versions (affected versions not specified) Qualcomm SD 835 versions (affected versions not specified) Qualcomm SD 845 / SD 850 versions (affected versions not specified) Qualcomm SD 855 versions (affected versions not specified) Qualcomm SDA660 versions (affected versions not specified) Qualcomm SDM439 versions (affected versions not specified) Qualcomm SDM630 versions (affected versions not specified) Qualcomm SDM660 versions (affected versions not specified) Qualcomm SDX20 versions (affected versions not specified) Qualcomm SDX24 versions (affected versions not specified)
Description The issue is related to improper input validation in allocation requests for secure allocations, which can lead to a page fault. This affects various Qualcomm Snapdragon products and components.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2019-2330

Affected Products

Qualcomm 215
Qualcomm Ipq4019
Qualcomm Ipq8064
Qualcomm Ipq8074
Qualcomm Mdm9150
Qualcomm Mdm9640
Qualcomm Mdm9650
Qualcomm Msm8909W
Qualcomm Msm8996Au
Qualcomm Qcs405
Qualcomm Qcs605
Qualcomm Sd 425
Qualcomm Sd 427
Qualcomm Sd 429
Qualcomm Sd 430
Qualcomm Sd 435
Qualcomm Sd 439
Qualcomm Sd 450
Qualcomm Sd 625
Qualcomm Sd 632
Qualcomm Sd 636
Qualcomm Sd 665
Qualcomm Sd 670
Qualcomm Sd 675
Qualcomm Sd 710
Qualcomm Sd 712
Qualcomm Sd 730
Qualcomm Sd 820A
Qualcomm Sd 835
Qualcomm Sd 845
Qualcomm Sd 850
Qualcomm Sd 855
Qualcomm Sdm660
Qualcomm Sdm630
Qualcomm Sdx20
Qualcomm Sdx24
Qualcomm Snapdragon Auto
Qualcomm Snapdragon Compute
Qualcomm Snapdragon Consumer Iot
Qualcomm Snapdragon Industrial Iot
Qualcomm Snapdragon Mobile
Qualcomm Snapdragon Voice & Music
Qualcomm Snapdragon Wearables
Qualcomm Snapdragon Wired Infrastructure/Networking