PT-2020-9536 · Qualcomm · Sxr2130+12

Published 2020-07-30 · Updated 2020-07-30 · CVE-2019-14124

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions (affected versions not specified)

Description: The issue is related to a memory failure in the content protection module due to a pointer not being within the scope. This affects various Snapdragon products, including Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking, in specific chipsets such as Kamorta, QCS404, Rennell, SC7180, SDX55, SM6150, SM7150, SM8250, SXR2130.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Access of Uninitialized Pointer

Weakness Enumeration

CWE-824

Related Identifiers

CVE-2019-14124

Affected Products

Kamorta

Qcs404

Rennell

Sc7180

Sdx55

Sm6150

Sm7150

Sm8250

Sxr2130

Snapdragon Auto

Snapdragon Compute

Snapdragon Mobile

Snapdragon Wired Infrastructure/Networking

References · 4

• https://qualcomm.com/company/product-security/bulletins/july-2020-security-bulletin · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-14124 · Security Note
• https://t.me/cibsecurity/13769 · Telegram Post
• https://qualcomm.com/company/product-security/bulletins/july-2020-bulletin · Note