description: Buffer overflow in modem due to improper array index check before copying into it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables
problem types: Integer Overflow to Buffer Overflow in Data HLOS
affected:
{
product: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables
vendor: Qualcomm, Inc.
versions:
status: affected, version: APQ8009W
status: affected, version: APQ8017
status: affected, version: APQ8053
status: affected, version: APQ8064AU
status: affected, version: APQ8096AU
status: affected, version: AQT1000
status: affected, version: MSM8909W
status: affected, version: MSM8917
status: affected, version: MSM8937
status: affected, version: MSM8953
status: affected, version: MSM8996AU
status: affected, version: PM8937
status: affected, version: QCA6320
status: affected, version: QCA6390
status: affected, version: QCA6391
status: affected, version: QCA6420
status: affected, version: QCA6421
status: affected, version: QCA6426
status: affected, version: QCA6430
status: affected, version: QCA6431
status: affected, version: QCA6436
status: affected, version: QCA6564
status: affected, version: QCA6564A
status: affected, version: QCA6564AU
status: affected, version: QCA6574
status: affected, version: QCA6574A
status: affected, version: QCA6574AU
status: affected, version: QCA6595
status: affected, version: QCA6595AU
status: affected, version: QCA6696
status: affected, version: QCM2290
status: affected, version: QCM4290
status: affected, version: QCM6125
status: affected, version: QCS2290
status: affected, version: QCS4290
status: affected, version: QCS603
status: affected, version: QCS605
status: affected, version: QCS610
status: affected, version: QCS6125
status: affected, version: Qualcomm215
status: affected, version: SA6145P
status: affected, version: SA6150P
status: affected, version: SA6155
status: affected, version: SA6155P
status: affected, version: SA8145P
status: affected, version: SA8150P
status: affected, version: SA8155
status: affected, version: SA8155P
status: affected, version: SA8195P
status: affected, version: SD 455
status: affected, version: SD 636
status: affected, version: SD 675
status: affected, version: SD205
status: affected, version: SD210
status: affected, version: SD429
status: affected, version: SD439
status: affected, version: SD450
status: affected, version: SD460
status: affected, version: SD480
status: affected, version: SD632
status: affected, version: SD660
status: affected, version: SD662
status: affected, version: SD665
status: affected, version: SD670
status: affected, version: SD675
status: affected, version: SD678
status: affected, version: SD690 5G
status: affected, version: SD720G
status: affected, version: SD730
status: affected, version: SD750G
status: affected, version: SD765
status: affected, version: SD765G
status: affected, version: SD768G
status: affected, version: SD778G
status: affected, version: SD780G
status: affected, version: SD835
status: affected, version: SD855
status: affected, version: SD865 5G
status: affected, version: SD870
status: affected, version: SD888
status: affected, version: SD888 5G
status: affected, version: SDM429W
status: affected, version: SDM630
status: affected, version: SDM830
status: affected, version: SDW2500
status: affected, version: SDX50M
status: affected, version: SDX55
status: affected, version: SDX55M
status: affected, version: SDXR1
status: affected, version: SDXR2 5G
status: affected, version: SM4125
status: affected, version: SM6250
status: affected, version: SM6250P
status: affected, version: SM7250P
status: affected, version: SM7325P
status: affected, version: WCD9335
status: affected, version: WCD9370
status: affected, version: WCD9371
status: affected, version: WCD9375
status: affected, version: WCD9380
status: affected, version: WCD9385
status: affected, version: WCN3610
status: affected, version: WCN3615
status: affected, version: WCN3620
status: affected, version: WCN3660
status: affected, version: WCN3660B
status: affected, version: WCN3680
status: affected, version: WCN3680B
status: affected, version: WCN3910
status: affected, version: WCN3950
status: affected, version: WCN3988
status: affected, version: WCN3991
status: affected, version: WCN3998
status: affected, version: WCN6740
status: affected, version: WCN6750
status: affected, version: WCN
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
]