PT-2019-11918

CVE-2019-10533

·

Published

2019-11-06

·

Updated

2019-11-08

Description by

CVSS 2.0
10
High
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto versions MDM9206 Qualcomm Snapdragon Compute versions QCS405, QCS605 Qualcomm Snapdragon Consumer IOT versions QCA6574AU Qualcomm Snapdragon Industrial IOT versions QCA6574AU Qualcomm Snapdragon Mobile versions MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855 Qualcomm Snapdragon Voice & Music versions SD 210/SD 212/SD 205 Qualcomm Snapdragon Wearables versions SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855 Qualcomm 215 SDA660 SDM439 SDM630 SDM660 SDX20
Description The issue is caused by out of bound access due to improper validation of array index, resulting in the corruption of the index table entry. This affects various Qualcomm Snapdragon products, including Auto, Compute, Consumer IOT, Industrial IOT, Mobile, Voice & Music, and Wearables, as well as other Qualcomm products.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾