PT-2019-6217 · Qualcomm · Sdm630+29

Published 2019-07-22 · Updated 2019-07-22 · CVE-2019-2269

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto versions prior to the fixed version Qualcomm Snapdragon Compute versions prior to the fixed version Qualcomm Snapdragon Consumer IOT versions prior to the fixed version Qualcomm Snapdragon Industrial IOT versions prior to the fixed version Qualcomm Snapdragon Mobile versions prior to the fixed version Qualcomm Snapdragon Voice & Music versions prior to the fixed version MDM9150 versions prior to the fixed version MDM9650 versions prior to the fixed version MSM8996AU versions prior to the fixed version QCS405 versions prior to the fixed version QCS605 versions prior to the fixed version SD 625 versions prior to the fixed version SD 636 versions prior to the fixed version SD 665 versions prior to the fixed version SD 712 / SD 710 / SD 670 versions prior to the fixed version SD 730 versions prior to the fixed version SD 820 versions prior to the fixed version SD 820A versions prior to the fixed version SD 835 versions prior to the fixed version SD 845 / SD 850 versions prior to the fixed version SD 855 versions prior to the fixed version SDA660 versions prior to the fixed version SDM630 versions prior to the fixed version SDM660 versions prior to the fixed version SDX20 versions prior to the fixed version SDX24 versions prior to the fixed version SXR1130 versions prior to the fixed version

Description The issue is related to a possible buffer overflow while processing the high level lim process action frame due to improper buffer length validation. This could allow an attacker to impact the confidentiality, integrity, and availability of protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2022-03980

CVE-2019-2269

Affected Products

Mdm9150

Mdm9650

Msm8996Au

Qcs405

Qcs605

Qualcomm Snapdragon Auto

Qualcomm Snapdragon Compute

Qualcomm Snapdragon Consumer Iot

Qualcomm Snapdragon Industrial Iot

Qualcomm Snapdragon Mobile

Qualcomm Snapdragon Voice & Music

Sd 625

Sd 636

Sd 665

Sd 670

Sd 710

Sd 712

Sd 730

Sd 820

Sd 820A

Sd 835

Sd 845

Sd 850

Sd 855

Sda660

Sdm630

Sdm660

Sdx20

Sdx24

Sxr1130

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-2269 · Security Note
• https://bdu.fstec.ru/vul/2022-03980 · Security Note
• https://codeaurora.org/security-bulletin/2019/06/03/june-2019-code-aurora-security-bulletin · Patch