Aller au contenu
Se connecter
Non notée

CVE-2019-2289 Lack of integrity check allows MODEM to accept any NAS messages which can result into authentication bypass of NAS in…

Description

Lack of integrity check allows MODEM to accept any NAS messages which can result into authentication bypass of NAS in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8976, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, Snapdragon_High_Med_2016, SXR1130, SXR2130

Produits et versions touchés

Produit Versions touchées Corrigé en
Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables Versions non publiées

Autres CVE de Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Les 50 CVE de Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables →
CVE-2019-14073 Copying RTCP messages into the output buffer without checking the destination buffer size which could lead to a remote… Non notée CVE-2019-14062 Buffer overflows while decoding setup message from Network due to lack of check of IE message length received from… Non notée CVE-2020-3616 Buffer overflow in display function due to memory copy without checking length of size using strcpy function in… Non notée CVE-2019-14038 Buffer over-read in ADSP parse function due to lack of check for availability of sufficient data payload received in… Non notée
Suivre cette CVE