PT-2020-9540 · Qualcomm · Qualcomm Snapdragon Auto+5

Published 2020-04-16 · Updated 2020-04-21 · CVE-2019-14132

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto versions (affected versions not specified) Qualcomm Snapdragon Consumer IOT versions (affected versions not specified) Qualcomm Snapdragon Mobile versions (affected versions not specified) QCS605 versions (affected versions not specified) SA6155P versions (affected versions not specified) SM8150 versions (affected versions not specified)

Description: The issue is related to a buffer over-write that occurs when a 0-byte buffer is typecasted to another structure, resulting in memory corruption. This problem affects various Qualcomm Snapdragon products.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2019-14132

Affected Products

Qcs605

Qualcomm Snapdragon Auto

Qualcomm Snapdragon Consumer Iot

Qualcomm Snapdragon Mobile

Sa6155P

Sm8150

References · 2

• https://qualcomm.com/company/product-security/bulletins/april-2020-bulletin · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-14132 · Security Note