PT-2019-6294 · Qualcomm · Sda660+49
Aaa
·
Published
2019-11-04
·
Updated
2019-12-13
·
CVE-2019-2321
CVSS v2.0
7.2
High
| Vector | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Qualcomm QSEE microprogram software versions (affected versions not specified)
Description
The issue is related to a buffer copy without input size validation in the logging mechanism of Qualcomm's QSEE microprogram software. This could allow an attacker to impact the confidentiality, integrity, and availability of protected information. The vulnerability affects various Snapdragon products, including Auto, Compute, Connectivity, Consumer Electronics Connectivity, Consumer IOT, Industrial IOT, IoT, Mobile, Voice & Music, Wearables, and Wired Infrastructure and Networking, in multiple chipsets such as APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, IPQ4019, IPQ8074, MDM9150, MDM9205, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, QCA8081, QCS404, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SM6150, SM7150, SM8150, Snapdragon High Med 2016, SXR1130, SXR2130.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Apq8009
Apq8017
Apq8053
Apq8096
Apq8096Au
Apq8098
Ipq4019
Ipq8074
Mdm9150
Mdm9205
Mdm9206
Mdm9207C
Mdm9607
Mdm9650
Msm8905
Msm8909W
Msm8917
Msm8920
Msm8937
Msm8939
Msm8940
Msm8953
Msm8996
Msm8996Au
Msm8998
Qca8081
Qcs404
Qcs605
Qm215
Qsee
Sda660
Sda845
Sdm429
Sdm439
Sdm450
Sdm630
Sdm632
Sdm636
Sdm660
Sdm670
Sdm710
Sdm845
Sdm850
Sdx24
Sm6150
Sm7150
Sm8150
Sxr1130
Sxr2130
Snapdragon