CVEvulnerability

CVE-2019-2318

5.5 MEDIUM Published 2019-11-21 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-11-21
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-125

Description

Non Secure Kernel can cause Trustzone to do an arbitrary memory read which will result into DOS in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8017, APQ8053, APQ8096, APQ8096AU, IPQ8074, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, QCA8081, QM215, SDM429, SDM439, SDM450, SDM632, Snapdragon_High_Med_2016

Affected configurations

• qualcomm apq8017 firmware • qualcomm apq8053 firmware • qualcomm apq8096 firmware • qualcomm apq8096au firmware • qualcomm ipq8074 firmware • qualcomm msm8917 firmware • qualcomm msm8920 firmware • qualcomm msm8937 firmware • qualcomm msm8940 firmware • qualcomm msm8953 firmware • qualcomm msm8996 firmware • qualcomm msm8996au firmware • qualcomm qca8081 firmware • qualcomm qm215 firmware • qualcomm sdm429 firmware • qualcomm sdm439 firmware • qualcomm sdm450 firmware • qualcomm sdm632 firmware • qualcomm snapdragon high med 2016 firmware

Related

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References