Not rated
CVE-2019-14025 u'When a new session is created, Object is returned that contains TZ addresses and it get passed to HLOS as an handle to…
Description
u'When a new session is created, Object is returned that contains TZ addresses and it get passed to HLOS as an handle to refer to a particular session and can cause TZ to jump to a invalid address' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Kamorta, QCS404, QCS610, Rennell, SC7180, SDX55, SM6150, SM7150, SM8250, SXR2130
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking | Versions not published |
References
- www.qualcomm.com www.qualcomm.com
Timeline
- Published
- Last modified
Other CVEs of Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
The 5 CVEs of Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking →
CVE-2019-14030
The size of a buffer is determined by addition and multiplications operations that have the potential to overflow due to…
Not rated
CVE-2019-10612
UTCB object has a function pointer called by the reaper to deallocate its memory resources and this address can…
Not rated
CVE-2019-2249
Kernel can do a memory read from arbitrary address passed by user during execution of a syscall in Snapdragon Auto,…
Not rated
CVE-2018-11925
Data length received from firmware is not validated against the max allowed size which can result in buffer overflow
Not rated