PT-2020-9066 · Qualcomm · Snapdragon Connectivity+7
Published
2020-03-05
·
Updated
2020-03-07
·
CVE-2019-10546
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Snapdragon Auto versions APQ8096 through SM8250
Snapdragon Compute versions APQ8096 through SM8250
Snapdragon Connectivity versions APQ8096 through SM8250
Snapdragon Consumer Electronics Connectivity versions APQ8096 through SM8250
Snapdragon Consumer IOT versions APQ8096 through SM8250
Snapdragon Industrial IOT versions APQ8096 through SM8250
Snapdragon Mobile versions APQ8096 through SM8250
Snapdragon Wired Infrastructure and Networking versions APQ8096 through SM8250
Description
A buffer overflow can occur in WLAN firmware while parsing beacon/probe response frames during roaming. This issue affects various Snapdragon products, including Auto, Compute, Connectivity, Consumer Electronics Connectivity, Consumer IOT, Industrial IOT, Mobile, and Wired Infrastructure and Networking.
Recommendations
For all affected versions, update to a newer version that contains a fix for this issue.
As a temporary workaround, consider disabling the WLAN firmware parsing of beacon/probe response frames during roaming until a patch is available.
Restrict access to the vulnerable WLAN firmware to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Snapdragon Auto
Snapdragon Compute
Snapdragon Connectivity
Snapdragon Consumer Electronics Connectivity
Snapdragon Consumer Iot
Snapdragon Industrial Iot
Snapdragon Mobile
Snapdragon Wired Infrastructure/Networking