PT-2019-16395 · Qualcomm · Qualcomm Snapdragon Compute+7
Published
2019-11-06
·
Updated
2019-11-07
·
CVE-2019-2331
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Qualcomm Snapdragon Auto versions MDM9150 through MDM9650
Qualcomm Snapdragon Compute versions QCS405 through QCS605
Qualcomm Snapdragon Consumer IOT versions MDM9150 through MDM9650
Qualcomm Snapdragon Industrial IOT versions MDM9150 through MDM9650
Qualcomm Snapdragon IoT versions MDM9150 through MDM9650
Qualcomm Snapdragon Mobile versions MSM8909W through SD 855
Qualcomm Snapdragon Voice & Music versions MDM9150 through MDM9650
Qualcomm Snapdragon Wearables versions MDM9150 through MDM9650
Description
The issue is related to a possible integer overflow due to subtracting two integers without checking if the result would overflow or not. This affects various Qualcomm Snapdragon products, including Auto, Compute, Consumer IOT, Industrial IOT, IoT, Mobile, Voice & Music, and Wearables.
Recommendations
For Qualcomm Snapdragon Auto versions MDM9150 through MDM9650, update to a version that includes the fix for the integer overflow issue.
For Qualcomm Snapdragon Compute versions QCS405 through QCS605, update to a version that includes the fix for the integer overflow issue.
For Qualcomm Snapdragon Consumer IOT versions MDM9150 through MDM9650, update to a version that includes the fix for the integer overflow issue.
For Qualcomm Snapdragon Industrial IOT versions MDM9150 through MDM9650, update to a version that includes the fix for the integer overflow issue.
For Qualcomm Snapdragon IoT versions MDM9150 through MDM9650, update to a version that includes the fix for the integer overflow issue.
For Qualcomm Snapdragon Mobile versions MSM8909W through SD 855, update to a version that includes the fix for the integer overflow issue.
For Qualcomm Snapdragon Voice & Music versions MDM9150 through MDM9650, update to a version that includes the fix for the integer overflow issue.
For Qualcomm Snapdragon Wearables versions MDM9150 through MDM9650, update to a version that includes the fix for the integer overflow issue.
Fix
Integer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Qualcomm Snapdragon Auto
Qualcomm Snapdragon Compute
Qualcomm Snapdragon Consumer Iot
Qualcomm Snapdragon Industrial Iot
Qualcomm Snapdragon
Qualcomm Snapdragon Mobile
Qualcomm Snapdragon Voice & Music
Qualcomm Snapdragon Wearables