PT-2020-9523 · Qualcomm · Snapdragon

Published 2020-04-16 · Updated 2020-04-21 · CVE-2019-14104

Positive Technologies (AI Summary)

CVSS v2.0

6.6

Medium

Base vector

AV:L/AC:L/Au:N/C:C/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions (affected versions not specified)

Description: The issue is related to slab-out-of-bounds access that can occur due to an invalid context pointer. This happens because of a lack of null check on the pointer before it is accessed. The affected components include Snapdragon Compute, Snapdragon Consumer IOT, and Snapdragon Mobile, specifically in chipsets such as APQ8053, SC8180X, SDX55, and SM8150.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2019-14104

Affected Products

Snapdragon

References · 3

• https://qualcomm.com/company/product-security/bulletins/april-2020-bulletin · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-14104 · Security Note
• https://t.me/cvenotify/2839 · Telegram Post