PT-2020-9424 · Qualcomm · Snapdragon Connectivity+9
Published
2020-09-08
·
Updated
2021-07-21
·
CVE-2019-13999
CVSS v2.0
7.2
High
| Vector | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
Snapdragon Auto versions APQ8009 through SM8250
Snapdragon Compute versions APQ8009 through SM8250
Snapdragon Connectivity versions APQ8009 through SM8250
Snapdragon Consumer Electronics Connectivity versions APQ8009 through SM8250
Snapdragon Consumer IOT versions APQ8009 through SM8250
Snapdragon Industrial IOT versions APQ8009 through SM8250
Snapdragon Mobile versions APQ8009 through SM8250
Snapdragon Voice & Music versions APQ8009 through SM8250
Snapdragon Wearables versions APQ8009 through SM8250
Snapdragon Wired Infrastructure and Networking versions APQ8009 through SM8250
Description:
The issue is related to a lack of check for integer overflow for round up and addition operations, which can result in memory corruption and potential information leakage.
Recommendations:
For all affected versions, apply the necessary patches or updates to resolve the issue.
As a temporary workaround, consider restricting access to sensitive operations to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Integer Overflow
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Snapdragon Auto
Snapdragon Compute
Snapdragon Connectivity
Snapdragon Consumer Electronics Connectivity
Snapdragon Consumer Iot
Snapdragon Industrial Iot
Snapdragon Mobile
Snapdragon Voice & Music
Snapdragon Wearables
Snapdragon Wired Infrastructure/Networking