1. CVE-Search
  2. CVE-2019-2319
ID CVE-2019-2319
Summary HLOS could corrupt CPZ page table memory for S1 managed VMs in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9205, QCS404, QCS605, SDA845, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SXR1130, SXR2130
References
Vulnerable Configurations
  • cpe:2.3:o:qualcomm:mdm9205_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:mdm9205_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:mdm9205:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:mdm9205:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:qcs404_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:qcs404_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:qcs404:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:qcs404:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:qcs605:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:qcs605:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sda845_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:sda845_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:sda845:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:sda845:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sdm670_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:sdm670_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:sdm670:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:sdm670:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sdm710_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:sdm710_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:sdm710:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:sdm710:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sdm845_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:sdm845_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:sdm845:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:sdm845:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sdm850_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:sdm850_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:sdm850:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:sdm850:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sm6150_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:sm6150_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:sm6150:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:sm6150:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sm7150_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:sm7150_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:sm7150:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:sm7150:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sm8150_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:sm8150_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:sm8150:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:sm8150:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sxr1130_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:sxr1130_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:sxr1130:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:sxr1130:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sxr2130_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:sxr2130_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:sxr2130:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:sxr2130:-:*:*:*:*:*:*:*
CVSS
Base: 4.6 (as of 24-08-2020 - 17:37)
Impact:
Exploitability:
CWE CWE-787
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:L/AC:L/Au:N/C:P/I:P/A:P
refmap via4
confirm https://www.qualcomm.com/company/product-security/bulletins/november-2019-bulletin
Last major update 24-08-2020 - 17:37
Published 12-12-2019 - 09:15
Last modified 24-08-2020 - 17:37
Back to Top