CVE-2019-13998

🗓️ 08 Sep 2020 09:31:29Reported by qualcommType

Lack of check for TX FIFO write and read indices can lead to memory corruption and information leakage in multiple Snapdragon platforms and product

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2019-13998	8 Sep 202014:55	–	circl
CVE	CVE-2019-13998	8 Sep 202009:31	–	cve
EUVD	EUVD-2019-5256	7 Oct 202500:30	–	euvd
NCSC	Vulnerabilities fixed in Samsung Mobile	14 Sep 202000:00	–	ncsc
NCSC	Vulnerabilities fixed in Blackberry Android	16 Oct 202000:00	–	ncsc
NVD	CVE-2019-13998	8 Sep 202010:15	–	nvd
Prion	Memory corruption	8 Sep 202010:15	–	prion
RedhatCVE	CVE-2019-13998	22 May 202510:06	–	redhatcve
ThreatPost	High-Severity Android RCE Flaw Fixed in August Security Update	5 Aug 202016:14	–	threatpost

[
  {
    "product": "Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, Bitra, IPQ6018, IPQ8074, Kamorta, MDM9150, MDM9205, MDM9206, MDM9607, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA8081, QCM2150, QCN7605, QCS404, QCS405, QCS605, QCS610, QM215, Rennell, SA415M, SA515M, SA6155P, Saipan, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130"
      }
    ]
  }
]

Source	Link
qualcomm	www.qualcomm.com/company/product-security/bulletins/august-2020-bulletin

08 Sep 2020 09:31Current

7.8High risk

Vulners AI Score7.8

EPSS0.00203