PT-2020-9098 · Qualcomm · Qcs610+25

Published 2020-09-08 · Updated 2021-07-21 · CVE-2019-10596

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Snapdragon Auto versions prior to the fixed version Snapdragon Compute versions prior to the fixed version Snapdragon Connectivity versions prior to the fixed version Snapdragon Consumer IOT versions prior to the fixed version Snapdragon Industrial IOT versions prior to the fixed version Snapdragon Mobile versions prior to the fixed version Snapdragon Wired Infrastructure and Networking versions prior to the fixed version Bitra versions prior to the fixed version Nicobar versions prior to the fixed version QCS605 versions prior to the fixed version QCS610 versions prior to the fixed version Rennell versions prior to the fixed version SA6155P versions prior to the fixed version Saipan versions prior to the fixed version SC7180 versions prior to the fixed version SC8180X versions prior to the fixed version SDM670 versions prior to the fixed version SDM710 versions prior to the fixed version SDM845 versions prior to the fixed version SDM850 versions prior to the fixed version SM6150 versions prior to the fixed version SM7150 versions prior to the fixed version SM8150 versions prior to the fixed version SM8250 versions prior to the fixed version SXR1130 versions prior to the fixed version SXR2130 versions prior to the fixed version

Description The issue is related to improper access control, which can allow a signed process to guess the pid of other processes and access their address space.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2019-10596

Affected Products

Bitra

Nicobar

Qcs605

Qcs610

Rennell

Sa6155P

Sc7180

Sc8180X

Sdm670

Sdm710

Sdm845

Sdm850

Sm6150

Sm7150

Sm8150

Sm8250

Sxr1130

Sxr2130

Saipan

Snapdragon Auto

Snapdragon Compute

Snapdragon Connectivity

Snapdragon Consumer Iot

Snapdragon Industrial Iot

Snapdragon Mobile

Snapdragon Wired Infrastructure/Networking

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-10596 · Security Note
• https://qualcomm.com/company/product-security/bulletins/august-2020-security-bulletin · Vendor Advisory
• https://t.me/cibsecurity/14533 · Telegram Post
• https://qualcomm.com/company/product-security/bulletins/august-2020-bulletin · Note