5.5
CVE-2019-2318
- EPSS 0.17%
- Veröffentlicht 21.11.2019 15:15:16
- Zuletzt bearbeitet 21.11.2024 04:40:41
- Erkennungen
LoginNon Secure Kernel can cause Trustzone to do an arbitrary memory read which will result into DOS in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8017, APQ8053, APQ8096, APQ8096AU, IPQ8074, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, QCA8081, QM215, SDM429, SDM439, SDM450, SDM632, Snapdragon_High_Med_2016
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Apq8017 Firmware Version -
Qualcomm ≫ Apq8053 Firmware Version -
Qualcomm ≫ Apq8096 Firmware Version -
Qualcomm ≫ Apq8096au Firmware Version -
Qualcomm ≫ Ipq8074 Firmware Version -
Qualcomm ≫ Msm8917 Firmware Version -
Qualcomm ≫ Msm8920 Firmware Version -
Qualcomm ≫ Msm8937 Firmware Version -
Qualcomm ≫ Msm8940 Firmware Version -
Qualcomm ≫ Msm8953 Firmware Version -
Qualcomm ≫ Msm8996 Firmware Version -
Qualcomm ≫ Msm8996au Firmware Version -
Qualcomm ≫ Qca8081 Firmware Version -
Qualcomm ≫ Qm215 Firmware Version -
Qualcomm ≫ Sdm429 Firmware Version -
Qualcomm ≫ Sdm439 Firmware Version -
Qualcomm ≫ Sdm450 Firmware Version -
Qualcomm ≫ Sdm632 Firmware Version -
Qualcomm ≫ Snapdragon High Med 2016 Firmware Version -
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.17% | 0.065 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
|
| NIST | 2.1 | 3.9 | 2.9 |
AV:L/AC:L/Au:N/C:N/I:N/A:P
|
CWE-125 Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin