Not rated

CVE-2019-2324 When ADSP is compromised, the audio port index that`s returned from ADSP might be out of the valid range and leads to…

Description

When ADSP is compromised, the audio port index that`s returned from ADSP might be out of the valid range and leads to out of boundary access in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9615, MDM9640, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 845 / SD 850, SD 855, SDX20, SDX24

Affected products and versions

Product	Affected versions	Fixed in
Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables	Versions not published

References

source.android.com source.android.com

Timeline

Published November 6, 2019
Last modified August 4, 2024

The 7 CVEs of Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables →

CVE-2019-14093 Array out of bound access can occur in display module due to lack of bound check on input parcel received in… Not rated CVE-2019-10532 Null-pointer dereference issue can occur while calculating string length when source string length is zero in Snapdragon… Not rated CVE-2019-2306 Improper casting of structure while handling the buffer leads to out of bound read in display in Snapdragon Auto,… Not rated CVE-2019-2253 Buffer over-read can occur while parsing an ogg file with a corrupted comment block Not rated

Track this CVE