description: Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
problem types: Improper Validation of Array Index in MODEM
affected:
{
vendor: Qualcomm, Inc.
product: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
versions:
version: APQ8009, status: affected
version: APQ8009W, status: affected
version: APQ8017, status: affected
version: APQ8037, status: affected
version: APQ8052, status: affected
version: APQ8056, status: affected
version: APQ8076, status: affected
version: APQ8096AU, status: affected
version: AQT1000, status: affected
version: AR8035, status: affected
version: CSRA6620, status: affected
version: CSRA6640, status: affected
version: CSRB31024, status: affected
version: FSM10055, status: affected
version: MDM8207, status: affected
version: MDM9150, status: affected
version: MDM9205, status: affected
version: MDM9206, status: affected
version: MDM9207, status: affected
version: MDM9230, status: affected
version: MDM9250, status: affected
version: MDM9330, status: affected
version: MDM9607, status: affected
version: MDM9628, status: affected
version: MDM9630, status: affected
version: MDM9640, status: affected
version: MDM9650, status: affected
version: MSM8108, status: affected
version: MSM8208, status: affected
version: MSM8209, status: affected
version: MSM8608, status: affected
version: MSM8909W, status: affected
version: MSM8917, status: affected
version: MSM8920, status: affected
version: MSM8937, status: affected
version: MSM8940, status: affected
version: MSM8952, status: affected
version: MSM8956, status: affected
version: MSM8976, status: affected
version: MSM8976SG, status: affected
version: MSM8996AU, status: affected
version: QCA4004, status: affected
version: QCA6174, status: affected
version: QCA6174A, status: affected
version: QCA6310, status: affected
version: QCA6320, status: affected
version: QCA6335, status: affected
version: QCA6390, status: affected
version: QCA6391, status: affected
version: QCA6420, status: affected
version: QCA6421, status: affected
version: QCA6426, status: affected
version: QCA6430, status: affected
version: QCA6431, status: affected
version: QCA6436, status: affected
version: QCA6564A, status: affected
version: QCA6564AU, status: affected
version: QCA6574, status: affected
version: QCA6574A, status: affected
version: QCA6574AU, status: affected
version: QCA6584, status: affected
version: QCA6584AU, status: affected
version: QCA6595AU, status: affected
version: QCA6696, status: affected
version: QCA8081, status: affected
version: QCA8337, status: affected
version: QCA9367, status: affected
version: QCA9377, status: affected
version: QCA9379, status: affected
version: QCC5100, status: affected
version: QCM2290, status: affected
version: QCM4290, status: affected
version: QCM6125, status: affected
version: QCM6490, status: affected
version: QCN6024, status: affected
version: QCN9024, status: affected
version: QCS2290, status: affected
version: QCS405, status: affected
version: QCS410, status: affected
version: QCS4290, status: affected
version: QCS603, status: affected
version: QCS605, status: affected
version: QCS610, status: affected
version: QCS6125, status: affected
version: QCS6490, status: affected
version: QCX315, status: affected
version: QET4101, status: affected
version: QSW8573, status: affected
version: Qualcomm215, status: affected
version: SA415M, status: affected
version: SA515M, status: affected
version: SC8180X+SDX55, status: affected
version: SD 455, status: affected
version: SD 636, status: affected
version: SD 675, status: affected
version: SD 8 Gen1 5G, status: affected
version: SD 8cx Gen2, status: affected
version: SD205, status: affected
version: SD210, status: affected
version: SD429, status: affected
version: SD439, status: affected
version: SD450, status: affected
version: SD460, status: affected
version: SD480, status: affected
version: SD625, status: affected
version: SD626, status: affected
version: SD632, status: affected
version: SD660, status: affected
version: SD662, status: affected
version: SD665, status: affected
version: SD670, status: affected
version: SD675, status: affected
version: SD678, status: affected
version: SD680, status: affected
version: SD690 5G, status: affected
version: SD695, status: affected
version: SD710, status: affected
version: SD712, status: affected
version: SD720G, status: affected
version: SD730, status: affected
version: SD750G, status: affected
version: SD765, status: affected
version: SD765G, status: affected
version: SD768G, status: affected
version: SD778G, status: affected
version: SD780G, status: affected
version: SD7c, status: affected
version: SD820, status: affected
version: SD821, status: affected
version: SD835, status: affected
version: SD845, status: affected
version: SD850, status: affected
version: SD855, status: affected
version: SD865 5G, status: affected
version: SD870, status: affected
version: SD888, status: affected
version: SD888 5G, status: affected
version: SDA429W, status: affected
version: SDM429W, status: affected
version: SDM630, status: affected
version: SDW2500, status: affected
version: SDX12, status: affected
version: SDX20, status: affected
version: SDX24, status: affected
version: SDX50M, status: affected
version: SDX55, status: affected
version: SDX55M, status: affected
version: SDX57M, status: affected
version: SDX65, status: affected
version: SDXR1, status: affected
version: SDXR2 5G, status: affected
version: SM4375, status: affected
version: SM6250, status: affected
version: SM6250P, status: affected
version: SM7250P, status: affected
version: SM7315, status: affected
version: SM7325P, status: affected
version: SW5100, status: affected
version: SW5100P, status: affected
version: WCD9306, status: affected
version: WCD9326, status: affected
version: WCD9330, status: affected
version: WCD9335, status: affected
version: WCD9340, status: affected
version: WCD9341, status: affected
version: WCD9360, status: affected
version: WCD9370, status: affected
version: WCD9371, status: affected
version: WCD9375, status: affected
version: WCD9380, status: affected
version: WCD9385, status: affected
version: WCN3610, status: affected
version: WCN3615, status: affected
version: WCN3620, status: affected
version: WCN3660, status: affected
version: WCN3660B, status: affected
version: WCN3680, status: affected
version: WCN3680B, status: affected
version: WCN3910, status: affected
version: WCN3950, status: affected
version: WCN3980, status: affected
version: WCN3988, status: affected
version: WCN3990, status: affected
version: WCN3991, status: affected
version: WCN3998, status: affected
version: WCN6740, status: affected
version: WCN6750, status: affected
version: WCN6850, status: affected
version: WCN6851, status: affected
version: WCN6855, status: affected
version: WCN6856, status: affected
version: WCN7850, status: affected
version: WCN7851, status: affected
version: WSA8810, status: affected
version: WSA8815, status: affected
version: WSA8830, status: affected
version: WSA8835, status: affected
}
metrics:
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 8.4
baseSeverity: HIGH
]