CVE-2019-2324

CRITICAL

9.8

Beschreibung

When ADSP is compromised, the audio port index that`s returned from ADSP might be out of the valid range and leads to out of boundary access in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9615, MDM9640, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 845 / SD 850, SD 855, SDX20, SDX24

CVE Details

CVSS v3.1 Bewertung9.8

SchweregradCRITICAL

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht11/6/2019

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

qualcomm:mdm9150qualcomm:mdm9150_firmwarequalcomm:mdm9206qualcomm:mdm9206_firmwarequalcomm:mdm9607qualcomm:mdm9607_firmwarequalcomm:mdm9615qualcomm:mdm9615_firmwarequalcomm:mdm9640qualcomm:mdm9640_firmwarequalcomm:mdm9650qualcomm:mdm9650_firmwarequalcomm:msm8909wqualcomm:msm8909w_firmwarequalcomm:sd_205qualcomm:sd_205_firmwarequalcomm:sd_210qualcomm:sd_210_firmwarequalcomm:sd_212qualcomm:sd_212_firmwarequalcomm:sd_415qualcomm:sd_415_firmwarequalcomm:sd_425qualcomm:sd_425_firmwarequalcomm:sd_427qualcomm:sd_427_firmwarequalcomm:sd_430qualcomm:sd_430_firmwarequalcomm:sd_435qualcomm:sd_435_firmwarequalcomm:sd_450qualcomm:sd_450_firmwarequalcomm:sd_600qualcomm:sd_600_firmwarequalcomm:sd_615qualcomm:sd_615_firmwarequalcomm:sd_616qualcomm:sd_616_firmwarequalcomm:sd_625qualcomm:sd_625_firmwarequalcomm:sd_665qualcomm:sd_665_firmwarequalcomm:sd_670qualcomm:sd_670_firmwarequalcomm:sd_675qualcomm:sd_675_firmwarequalcomm:sd_710qualcomm:sd_710_firmwarequalcomm:sd_712qualcomm:sd_712_firmwarequalcomm:sd_730qualcomm:sd_730_firmwarequalcomm:sd_820qualcomm:sd_820_firmwarequalcomm:sd_820aqualcomm:sd_820a_firmwarequalcomm:sd_845qualcomm:sd_845_firmwarequalcomm:sd_850qualcomm:sd_850_firmwarequalcomm:sd_855qualcomm:sd_855_firmwarequalcomm:sdx20qualcomm:sdx20_firmwarequalcomm:sdx24qualcomm:sdx24_firmware

Schwachen (CWE)

CWE-119

Referenzen

https://source.android.com/security/bulletin/(product-security@qualcomm.com)

https://source.android.com/security/bulletin/(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.