PT-2020-9442 · Qualcomm · Sda660+47

Published

2020-01-21

·

Updated

2020-01-23

·

CVE-2019-14016

CVSS v2.0

10

High

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996, MSM8996AU, Nicobar, QCS605, QM215, SA6155P, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM8150, SM8250, SXR1130, SXR2130
Description: An integer overflow occurs while playing a nonstandard clip in various Qualcomm Snapdragon products, including Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, and Snapdragon Wearables.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Integer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2019-14016

Affected Products

Apq8009
Apq8017
Apq8053
Apq8064
Apq8096Au
Apq8098
Mdm9206
Mdm9207C
Mdm9607
Msm8905
Msm8909W
Msm8917
Msm8920
Msm8937
Msm8939
Msm8940
Msm8953
Msm8996
Msm8996Au
Nicobar
Qcs605
Qm215
Sa6155P
Sda660
Sda845
Sdm429
Sdm439
Sdm450
Sdm632
Sdm660
Sdm670
Sdm710
Sdm845
Sdx20
Sm6150
Sm8150
Sm8250
Sxr1130
Sxr2130
Snapdragon Auto
Snapdragon Compute
Snapdragon Connectivity
Snapdragon Consumer Iot
Snapdragon Industrial Iot
Snapdragon Iot
Snapdragon Mobile
Snapdragon Voice & Music
Snapdragon Wearables