PT-2020-9537 · Qualcomm · Sda660+48

Published 2020-04-16 · Updated 2020-04-22 · CVE-2019-14127

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto versions (affected versions not specified) Qualcomm Snapdragon Compute versions (affected versions not specified) Qualcomm Snapdragon Consumer IOT versions (affected versions not specified) Qualcomm Snapdragon Industrial IOT versions (affected versions not specified) Qualcomm Snapdragon Mobile versions (affected versions not specified) Qualcomm Snapdragon Voice & Music versions (affected versions not specified) Qualcomm Snapdragon Wearables versions (affected versions not specified) APQ8009 (affected versions not specified) APQ8017 (affected versions not specified) APQ8053 (affected versions not specified) APQ8064 (affected versions not specified) APQ8096AU (affected versions not specified) APQ8098 (affected versions not specified) MDM9206 (affected versions not specified) MDM9207C (affected versions not specified) MDM9607 (affected versions not specified) MSM8905 (affected versions not specified) MSM8909W (affected versions not specified) MSM8917 (affected versions not specified) MSM8920 (affected versions not specified) MSM8937 (affected versions not specified) MSM8940 (affected versions not specified) MSM8953 (affected versions not specified) MSM8996AU (affected versions not specified) MSM8998 (affected versions not specified) Nicobar (affected versions not specified) QCS605 (affected versions not specified) QM215 (affected versions not specified) Rennell (affected versions not specified) SA6155P (affected versions not specified) Saipan (affected versions not specified) SDA660 (affected versions not specified) SDM429 (affected versions not specified) SDM429W (affected versions not specified) SDM439 (affected versions not specified) SDM450 (affected versions not specified) SDM630 (affected versions not specified) SDM632 (affected versions not specified) SDM636 (affected versions not specified) SDM660 (affected versions not specified) SDM670 (affected versions not specified) SDM710 (affected versions not specified) SDM845 (affected versions not specified) SDX20 (affected versions not specified) SM6150 (affected versions not specified) SM7150 (affected versions not specified) SM8150 (affected versions not specified) SM8250 (affected versions not specified) SXR1130 (affected versions not specified) SXR2130 (affected versions not specified)

Description: A possible buffer overflow issue exists due to the lack of validation of atom size buffer while playing mkv clips. This issue affects various Qualcomm Snapdragon products and components.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2019-14127

Affected Products

Apq8009

Apq8017

Apq8053

Apq8064

Apq8096Au

Apq8098

Mdm9206

Mdm9207C

Mdm9607

Msm8905

Msm8909W

Msm8917

Msm8920

Msm8937

Msm8940

Msm8953

Msm8996Au

Msm8998

Nicobar

Qcs605

Qm215

Qualcomm Snapdragon Auto

Qualcomm Snapdragon Compute

Qualcomm Snapdragon Consumer Iot

Qualcomm Snapdragon Industrial Iot

Qualcomm Snapdragon Mobile

Qualcomm Snapdragon Voice & Music

Qualcomm Snapdragon Wearables

Rennell

Sa6155P

Sda660

Sdm429

Sdm439

Sdm450

Sdm630

Sdm632

Sdm636

Sdm660

Sdm670

Sdm710

Sdm845

Sdx20

Sm6150

Sm7150

Sm8150

Sm8250

Sxr1130

Sxr2130

Saipan

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2019-14127 · Security Note
• https://qualcomm.com/company/product-security/bulletins/april-2020-bulletin · Vendor Advisory