description: Memory corruption in camera due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
problem types: Improper Validation of Array Index in Camera
affected:
{
vendor: Qualcomm, Inc.
product: Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
versions:
version: AQT1000, status: affected
version: MDM9150, status: affected
version: QCA6390, status: affected
version: QCA6391, status: affected
version: QCA6420, status: affected
version: QCA6426, status: affected
version: QCA6430, status: affected
version: QCA6436, status: affected
version: QCA6574AU, status: affected
version: QCA6595AU, status: affected
version: QCA6696, status: affected
version: QCA8337, status: affected
version: QCC5100, status: affected
version: QCN9074, status: affected
version: QCS410, status: affected
version: QCS610, status: affected
version: QCS8155, status: affected
version: Qualcomm215, status: affected
version: SA6145P, status: affected
version: SA6150P, status: affected
version: SA6155P, status: affected
version: SA8145P, status: affected
version: SA8150P, status: affected
version: SA8155P, status: affected
version: SA8195P, status: affected
version: SD 8 Gen1 5G, status: affected
version: SD205, status: affected
version: SD210, status: affected
version: SD855, status: affected
version: SD865 5G, status: affected
version: SD870, status: affected
version: SDA429W, status: affected
version: SDX55, status: affected
version: SDX55M, status: affected
version: SDXR2 5G, status: affected
version: SW5100, status: affected
version: SW5100P, status: affected
version: WCD9340, status: affected
version: WCD9341, status: affected
version: WCD9370, status: affected
version: WCD9380, status: affected
version: WCN3610, status: affected
version: WCN3660B, status: affected
version: WCN3680B, status: affected
version: WCN3950, status: affected
version: WCN3980, status: affected
version: WCN3988, status: affected
version: WCN3998, status: affected
version: WCN6850, status: affected
version: WCN6851, status: affected
version: WCN6855, status: affected
version: WCN6856, status: affected
version: WCN7850, status: affected
version: WCN7851, status: affected
version: WSA8810, status: affected
version: WSA8815, status: affected
version: WSA8830, status: affected
version: WSA8835, status: affected
}
metrics:
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 6.7
baseSeverity: MEDIUM
]