PT-2019-6217
CVE-2019-2269
·
Published
2019-07-22
·
Updated
2019-07-22
Description by
CVSS 2.0
10
HighMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Qualcomm Snapdragon Auto versions prior to the fixed version
Qualcomm Snapdragon Compute versions prior to the fixed version
Qualcomm Snapdragon Consumer IOT versions prior to the fixed version
Qualcomm Snapdragon Industrial IOT versions prior to the fixed version
Qualcomm Snapdragon Mobile versions prior to the fixed version
Qualcomm Snapdragon Voice & Music versions prior to the fixed version
MDM9150 versions prior to the fixed version
MDM9650 versions prior to the fixed version
MSM8996AU versions prior to the fixed version
QCS405 versions prior to the fixed version
QCS605 versions prior to the fixed version
SD 625 versions prior to the fixed version
SD 636 versions prior to the fixed version
SD 665 versions prior to the fixed version
SD 712 / SD 710 / SD 670 versions prior to the fixed version
SD 730 versions prior to the fixed version
SD 820 versions prior to the fixed version
SD 820A versions prior to the fixed version
SD 835 versions prior to the fixed version
SD 845 / SD 850 versions prior to the fixed version
SD 855 versions prior to the fixed version
SDA660 versions prior to the fixed version
SDM630 versions prior to the fixed version
SDM660 versions prior to the fixed version
SDX20 versions prior to the fixed version
SDX24 versions prior to the fixed version
SXR1130 versions prior to the fixed version
Description
The issue is related to a possible buffer overflow while processing the high level lim process action frame due to improper buffer length validation. This could allow an attacker to impact the confidentiality, integrity, and availability of protected information.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾