CVE-2019-2244

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto versions MDM9206 Qualcomm Snapdragon Compute versions MDM9206 Qualcomm Snapdragon Connectivity versions MDM9206 Qualcomm Snapdragon Consumer IOT versions MDM9206 Qualcomm Snapdragon Industrial IOT versions MDM9206 Qualcomm Snapdragon IoT versions MDM9206 Qualcomm Snapdragon Mobile versions MDM9206 Qualcomm Snapdragon Wearable versions MDM9206 Qualcomm MDM9607 Qualcomm MDM9650 Qualcomm MSM8909W Qualcomm MSM8996AU Qualcomm QCS605 Qualcomm 215 Qualcomm SD 210 Qualcomm SD 212 Qualcomm SD 205 Qualcomm SD 425 Qualcomm SD 427 Qualcomm SD 430 Qualcomm SD 435 Qualcomm SD 439 Qualcomm SD 429 Qualcomm SD 450 Qualcomm SD 600 Qualcomm SD 615 Qualcomm SD 16 Qualcomm SD 415 Qualcomm SD 625 Qualcomm SD 632 Qualcomm SD 636 Qualcomm SD 650 Qualcomm SD 52 Qualcomm SD 712 Qualcomm SD 710 Qualcomm SD 670 Qualcomm SD 820 Qualcomm SD 820A Qualcomm SD 835 Qualcomm SD 845 Qualcomm SD 850 Qualcomm SD 855 Qualcomm SDA660 Qualcomm SDM439 Qualcomm SDM630 Qualcomm SDM660 Qualcomm SDX20 Qualcomm Snapdragon High Med 2016

Description The issue is related to a possible integer underflow when calculating the length of elementary stream info from an invalid section length, which is later used to read from the input buffer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.