Lack of check of address range received from firmware response allows modem to respond arbitrary pages into its address range which can compromise HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM660, SDX20, SDX24

Project Subscriptions

Vendors Products
Qualcomm Subscribe
Msm8909w Subscribe
Msm8909w Firmware Subscribe
Msm8996au Subscribe
Msm8996au Firmware Subscribe
Qcs405 Firmware Subscribe
Qcs605 Firmware Subscribe
Qualcomm 215 Subscribe
Qualcomm 215 Firmware Subscribe
Sd 425 Firmware Subscribe
Sd 429 Firmware Subscribe
Sd 439 Firmware Subscribe
Sd 450 Firmware Subscribe
Sd 625 Firmware Subscribe
Sd 632 Firmware Subscribe
Sd 636 Firmware Subscribe
Sd 665 Firmware Subscribe
Sd 670 Firmware Subscribe
Sd 675 Firmware Subscribe
Sd 710 Firmware Subscribe
Sd 712 Firmware Subscribe
Sd 730 Firmware Subscribe
Sd 820a Subscribe
Sd 820a Firmware Subscribe
Sd 845 Firmware Subscribe
Sd 850 Firmware Subscribe
Sd 855 Firmware Subscribe
Sda660 Firmware Subscribe
Sdm439 Firmware Subscribe
Sdm660 Firmware Subscribe
Sdx20 Firmware Subscribe
Sdx24 Firmware Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2019-2342 Lack of check of address range received from firmware response allows modem to respond arbitrary pages into its address range which can compromise HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM660, SDX20, SDX24
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: qualcomm

Published:

Updated: 2024-08-04T22:24:18.740Z

Reserved: 2019-03-29T00:00:00

Link: CVE-2019-10538

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2019-09-30T16:15:10.977

Modified: 2024-11-21T04:19:23.477

Link: CVE-2019-10538

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses