Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact
7.8
CVSSv3

CVE-2019-13998

Published: 08/09/2020 Updated: 21/07/2021
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 641
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

u'Lack of check that the TX FIFO write and read indices that are read from shared RAM are less than the FIFO size results into memory corruption and potential information leakage' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, Bitra, IPQ6018, IPQ8074, Kamorta, MDM9150, MDM9205, MDM9206, MDM9607, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA8081, QCM2150, QCN7605, QCS404, QCS405, QCS605, QCS610, QM215, Rennell, SA415M, SA515M, SA6155P, Saipan, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

qualcomm apq8009 firmware -

qualcomm apq8017 firmware -

qualcomm apq8053 firmware -

qualcomm apq8096au firmware -

qualcomm apq8098 firmware -

qualcomm bitra firmware -

qualcomm ipq6018 firmware -

qualcomm ipq8074 firmware -

qualcomm kamorta firmware -

qualcomm mdm9150 firmware -

qualcomm mdm9205 firmware -

qualcomm mdm9206 firmware -

qualcomm mdm9607 firmware -

qualcomm mdm9640 firmware -

qualcomm mdm9645 firmware -

qualcomm mdm9650 firmware -

qualcomm mdm9655 firmware -

qualcomm msm8905 firmware -

qualcomm msm8909 firmware -

qualcomm msm8917 firmware -

qualcomm msm8920 firmware -

qualcomm msm8937 firmware -

qualcomm msm8940 firmware -

qualcomm msm8953 firmware -

qualcomm msm8996 firmware -

qualcomm msm8996au firmware -

qualcomm msm8998 firmware -

qualcomm nicobar firmware -

qualcomm qca8081 firmware -

qualcomm qcm2150 firmware -

qualcomm qcn7605 firmware -

qualcomm qcs404 firmware -

qualcomm qcs405 firmware -

qualcomm qcs605 firmware -

qualcomm qcs610 firmware -

qualcomm qm215 firmware -

qualcomm rennell firmware -

qualcomm sa415m firmware -

qualcomm sa6155p firmware -

qualcomm saipan firmware -

qualcomm sc7180 firmware -

qualcomm sc8180x firmware -

qualcomm sda660 firmware -

qualcomm sda845 firmware -

qualcomm sdm429 firmware -

qualcomm sdm429w firmware -

qualcomm sdm439 firmware -

qualcomm sdm450 firmware -

qualcomm sdm630 firmware -

qualcomm sdm632 firmware -

qualcomm sdm636 firmware -

qualcomm sdm660 firmware -

qualcomm sdm670 firmware -

qualcomm sdm710 firmware -

qualcomm sdm845 firmware -

qualcomm sdm850 firmware -

qualcomm sdx20 firmware -

qualcomm sdx24 firmware -

qualcomm sdx55 firmware -

qualcomm sm6150 firmware -

qualcomm sm7150 firmware -

qualcomm sm8150 firmware -

qualcomm sm8250 firmware -

qualcomm sxr1130 firmware -

qualcomm sxr2130 firmware -

Recent Articles

As the world descends into madness, it's good to see some things never change: Monthly Android patches
The Register • Shaun Nichols in San Francisco • 04 Aug 2020

Qualcomm bugs among the worst – including a critical hole in wireless networking Is it Patch Blues-day for Outlook? Microsoft's email client breaks worldwide, leaves everyone stumped

Google has emitted the August edition of its Android software security updates. This month's fixes include one remote-code-execution bug (CVE-2020-0240), present in the Android Framework. Google warns that the bug "could enable a remote attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process," though isn't being exploited... yet. That flaw was the only remote-code-execution bug present in the 01 level of the security patch bundle. This is t...

Read more...

References

CWE-787CWE-190https://www.qualcomm.com/company/product-security/bulletins/august-2020-security-bulletinhttps://www.qualcomm.com/company/product-security/bulletins/august-2020-bulletinhttps://nvd.nist.govhttps://www.theregister.co.uk/2020/08/04/android_august_patches/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversalCVE-2024-33545CVE-2024-35725CVE-2024-32704overflowfile uploadCVE-2024-0230CVE-2024-32705CVE-2024-23692
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook