High severity · published Sep 8, 2020
CVE-2019-13992
u'Out of bound memory access if stack push and pop operation are performed without doing a bound check on stack top' in Snapdragon Auto, Snapdragon Compute, Snapdragon…
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
u'Out of bound memory access if stack push and pop operation are performed without doing a bound check on stack top' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in Bitra, IPQ6018, IPQ8074, MDM9205, Nicobar, QCA8081, QCN7605, QCS404, QCS405, QCS605, QCS610, Rennell, SA415M, SA6155P, Saipan, SC7180, SC8180X, SDA845, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 10% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BF
Bitra Firmware · Qualcomm
All versions, or not specified · source: NVD
IF
Ipq6018 Firmware · Qualcomm
All versions, or not specified · source: NVD
IF
Ipq8074 Firmware · Qualcomm
All versions, or not specified · source: NVD
MF
Mdm9205 Firmware · Qualcomm
All versions, or not specified · source: NVD
NF
Nicobar Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca8081 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qcn7605 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qcs404 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qcs405 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qcs605 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qcs610 Firmware · Qualcomm
All versions, or not specified · source: NVD
RF
Rennell Firmware · Qualcomm
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-13992
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-13992
Broken Link
https://www.qualcomm.com/company/product-security/bulletins/august-2020-bulletin
Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/august-2020-security-bulletin
More from Bitra Firmware
9.8
CVE-2020-3703
u'Buffer over-read issue in Bluetooth peripheral firmware due to lack of check for invalid opcode and length of opcode received from central device(This CVE is equivalent to Link…
9.8
CVE-2020-3673
u'Buffer overflow can happen as part of SIP message packet processing while storing values in array due to lack of check to validate the index length' in Snapdragon Auto,…
9.8
CVE-2020-3654
u'Buffer overflow occurs while processing SIP message packet due to lack of check of index validation before copying into it' in Snapdragon Auto, Snapdragon Compute, Snapdragon…
9.8
CVE-2020-11116
u'Possible out of bound write while processing association response received from host due to lack of check of IE length' in Snapdragon Auto, Snapdragon Compute, Snapdragon…
7.8
CVE-2020-3694
u'Use out of range pointer issue can occur due to incorrect buffer range check during the execution of qseecom' in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile,…