PT-2020-9538 · Qualcomm · Sxr2130+12

Published 2020-07-30 · Updated 2021-07-21 · CVE-2019-14130

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions (affected versions not specified)

Description: Memory corruption can occur in a trusted application if the offset size from HLOS is more than the actual mapped buffer size. This issue affects various Snapdragon products, including Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking, in several chipsets such as Kamorta, QCS404, Rennell, SC7180, SDX55, SM6150, SM7150, SM8250, and SXR2130.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-119

CWE-787

Related Identifiers

CVE-2019-14130

Affected Products

Kamorta

Qcs404

Rennell

Sc7180

Sdx55

Sm6150

Sm7150

Sm8250

Sxr2130

Snapdragon Auto

Snapdragon Compute

Snapdragon Mobile

Snapdragon Wired Infrastructure/Networking

References · 4

• https://qualcomm.com/company/product-security/bulletins/july-2020-security-bulletin · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-14130 · Security Note
• https://qualcomm.com/company/product-security/bulletins/july-2020-bulletin · Note
• https://t.me/cibsecurity/13768 · Telegram Post