cnvd - cnvd-2020-16071

cnvd-2020-16071

Vulnerability from cnvd

Title: 多款Qualcomm产品缓冲区溢出漏洞（CNVD-2020-16071）

Description:

Qualcomm MDM9206等都是美国高通（Qualcomm）公司的产品。MDM9206是一款中央处理器（CPU）产品。MDM9640是一款中央处理器（CPU）产品。SDX24是一款调制解调器。

多款Qualcomm产品中的NAS存在缓冲区溢出漏洞。该漏洞源于网络系统或产品在内存上执行操作时，未正确验证数据边界，导致向关联的其他内存位置上执行了错误的读写操作。攻击者可利用该漏洞导致缓冲区溢出或堆溢出等。

Severity: 高

Patch Name: 多款Qualcomm产品缓冲区溢出漏洞（CNVD-2020-16071）的补丁

Patch Description:

Qualcomm MDM9206等都是美国高通（Qualcomm）公司的产品。MDM9206是一款中央处理器（CPU）产品。MDM9640是一款中央处理器（CPU）产品。SDX24是一款调制解调器。

多款Qualcomm产品中的NAS存在缓冲区溢出漏洞。该漏洞源于网络系统或产品在内存上执行操作时，未正确验证数据边界，导致向关联的其他内存位置上执行了错误的读写操作。攻击者可利用该漏洞导致缓冲区溢出或堆溢出等。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://www.qualcomm.com/company/product-security/bulletins/november-2019-bulletin

Reference: https://www.qualcomm.com/company/product-security/bulletins/november-2019-bulletin

Impacted products

Name
['Qualcomm MDM 9150', 'Qualcomm MDM 9650', 'Qualcomm SDM 439', 'Qualcomm SDM 630', 'Qualcomm SDM 660', 'Qualcomm SDX 24', 'Qualcomm SDX 20', 'Qualcomm MDM 9206', 'Qualcomm MDM 9640', 'Qualcomm MDM 9205', 'Qualcomm SDM 636', 'Qualcomm SDM 670', 'Qualcomm SDM 710', 'Qualcomm SDM 845', 'Qualcomm SDM 850', 'Qualcomm SM 6150', 'Qualcomm APQ 8053', 'Qualcomm APQ 8096AU', 'Qualcomm APQ 8098', 'Qualcomm MDM 9655', 'Qualcomm MSM 8905', 'Qualcomm SDM 429', 'Qualcomm SDM 450', 'Qualcomm SDM 632', 'Qualcomm SDX 55', 'Qualcomm Nicobar 8909', 'Qualcomm Nicobar 8909W', 'Qualcomm Nicobar 8917', 'Qualcomm Nicobar 8920', 'Qualcomm Nicobar 8937', 'Qualcomm Nicobar 8940', 'Qualcomm Nicobar 8953', 'Qualcomm Nicobar 8976', 'Qualcomm Nicobar 8996AU', 'Qualcomm Nicobar 8998', 'Marwel Qcm 无', 'Qualcomm QCS 2150', 'Qualcomm QM 605', 'Qualcomm SC 215', 'Qualcomm SDA 8180X', 'Qualcomm Snapdragon_High_Med 7150', 'Qualcomm Snapdragon_High_Med 8150', 'Qualcomm Snapdragon_High_Med 8250', 'Qualcomm SXR 2016']

Name

['Qualcomm MDM 9150', 'Qualcomm MDM 9650', 'Qualcomm SDM 439', 'Qualcomm SDM 630', 'Qualcomm SDM 660', 'Qualcomm SDX 24', 'Qualcomm SDX 20', 'Qualcomm MDM 9206', 'Qualcomm MDM 9640', 'Qualcomm MDM 9205', 'Qualcomm SDM 636', 'Qualcomm SDM 670', 'Qualcomm SDM 710', 'Qualcomm SDM 845', 'Qualcomm SDM 850', 'Qualcomm SM 6150', 'Qualcomm APQ 8053', 'Qualcomm APQ 8096AU', 'Qualcomm APQ 8098', 'Qualcomm MDM 9655', 'Qualcomm MSM 8905', 'Qualcomm SDM 429', 'Qualcomm SDM 450', 'Qualcomm SDM 632', 'Qualcomm SDX 55', 'Qualcomm Nicobar 8909', 'Qualcomm Nicobar 8909W', 'Qualcomm Nicobar 8917', 'Qualcomm Nicobar 8920', 'Qualcomm Nicobar 8937', 'Qualcomm Nicobar 8940', 'Qualcomm Nicobar 8953', 'Qualcomm Nicobar 8976', 'Qualcomm Nicobar 8996AU', 'Qualcomm Nicobar 8998', 'Marwel Qcm 无', 'Qualcomm QCS 2150', 'Qualcomm QM 605', 'Qualcomm SC 215', 'Qualcomm SDA 8180X', 'Qualcomm Snapdragon_High_Med 7150', 'Qualcomm Snapdragon_High_Med 8150', 'Qualcomm Snapdragon_High_Med 8250', 'Qualcomm SXR 2016']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2019-2337",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2019-2337"
    }
  },
  "description": "Qualcomm MDM9206\u7b49\u90fd\u662f\u7f8e\u56fd\u9ad8\u901a\uff08Qualcomm\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002MDM9206\u662f\u4e00\u6b3e\u4e2d\u592e\u5904\u7406\u5668\uff08CPU\uff09\u4ea7\u54c1\u3002MDM9640\u662f\u4e00\u6b3e\u4e2d\u592e\u5904\u7406\u5668\uff08CPU\uff09\u4ea7\u54c1\u3002SDX24\u662f\u4e00\u6b3e\u8c03\u5236\u89e3\u8c03\u5668\u3002\n\n\u591a\u6b3eQualcomm\u4ea7\u54c1\u4e2d\u7684NAS\u5b58\u5728\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7f51\u7edc\u7cfb\u7edf\u6216\u4ea7\u54c1\u5728\u5185\u5b58\u4e0a\u6267\u884c\u64cd\u4f5c\u65f6\uff0c\u672a\u6b63\u786e\u9a8c\u8bc1\u6570\u636e\u8fb9\u754c\uff0c\u5bfc\u81f4\u5411\u5173\u8054\u7684\u5176\u4ed6\u5185\u5b58\u4f4d\u7f6e\u4e0a\u6267\u884c\u4e86\u9519\u8bef\u7684\u8bfb\u5199\u64cd\u4f5c\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4\u7f13\u51b2\u533a\u6ea2\u51fa\u6216\u5806\u6ea2\u51fa\u7b49\u3002",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://www.qualcomm.com/company/product-security/bulletins/november-2019-bulletin",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2020-16071",
  "openTime": "2020-03-09",
  "patchDescription": "Qualcomm MDM9206\u7b49\u90fd\u662f\u7f8e\u56fd\u9ad8\u901a\uff08Qualcomm\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002MDM9206\u662f\u4e00\u6b3e\u4e2d\u592e\u5904\u7406\u5668\uff08CPU\uff09\u4ea7\u54c1\u3002MDM9640\u662f\u4e00\u6b3e\u4e2d\u592e\u5904\u7406\u5668\uff08CPU\uff09\u4ea7\u54c1\u3002SDX24\u662f\u4e00\u6b3e\u8c03\u5236\u89e3\u8c03\u5668\u3002\r\n\r\n\u591a\u6b3eQualcomm\u4ea7\u54c1\u4e2d\u7684NAS\u5b58\u5728\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7f51\u7edc\u7cfb\u7edf\u6216\u4ea7\u54c1\u5728\u5185\u5b58\u4e0a\u6267\u884c\u64cd\u4f5c\u65f6\uff0c\u672a\u6b63\u786e\u9a8c\u8bc1\u6570\u636e\u8fb9\u754c\uff0c\u5bfc\u81f4\u5411\u5173\u8054\u7684\u5176\u4ed6\u5185\u5b58\u4f4d\u7f6e\u4e0a\u6267\u884c\u4e86\u9519\u8bef\u7684\u8bfb\u5199\u64cd\u4f5c\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4\u7f13\u51b2\u533a\u6ea2\u51fa\u6216\u5806\u6ea2\u51fa\u7b49\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "\u591a\u6b3eQualcomm\u4ea7\u54c1\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\uff08CNVD-2020-16071\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Qualcomm MDM 9150",
      "Qualcomm MDM 9650",
      "Qualcomm SDM 439",
      "Qualcomm SDM 630",
      "Qualcomm SDM 660",
      "Qualcomm SDX 24",
      "Qualcomm SDX 20",
      "Qualcomm MDM 9206",
      "Qualcomm MDM 9640",
      "Qualcomm MDM 9205",
      "Qualcomm SDM 636",
      "Qualcomm SDM 670",
      "Qualcomm SDM 710",
      "Qualcomm SDM 845",
      "Qualcomm SDM 850",
      "Qualcomm SM 6150",
      "Qualcomm APQ 8053",
      "Qualcomm APQ 8096AU",
      "Qualcomm APQ 8098",
      "Qualcomm MDM 9655",
      "Qualcomm MSM 8905",
      "Qualcomm SDM 429",
      "Qualcomm SDM 450",
      "Qualcomm SDM 632",
      "Qualcomm SDX 55",
      "Qualcomm Nicobar 8909",
      "Qualcomm Nicobar 8909W",
      "Qualcomm Nicobar 8917",
      "Qualcomm Nicobar 8920",
      "Qualcomm Nicobar 8937",
      "Qualcomm Nicobar 8940",
      "Qualcomm Nicobar 8953",
      "Qualcomm Nicobar 8976",
      "Qualcomm Nicobar 8996AU",
      "Qualcomm Nicobar 8998",
      "Marwel Qcm \u65e0",
      "Qualcomm QCS 2150",
      "Qualcomm QM 605",
      "Qualcomm SC 215",
      "Qualcomm SDA 8180X",
      "Qualcomm Snapdragon_High_Med 7150",
      "Qualcomm Snapdragon_High_Med 8150",
      "Qualcomm Snapdragon_High_Med 8250",
      "Qualcomm SXR 2016"
    ]
  },
  "referenceLink": "https://www.qualcomm.com/company/product-security/bulletins/november-2019-bulletin",
  "serverity": "\u9ad8",
  "submitTime": "2019-11-14",
  "title": "\u591a\u6b3eQualcomm\u4ea7\u54c1\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\uff08CNVD-2020-16071\uff09"
}

CVE-2019-2337 (GCVE-0-2019-2337)

Vulnerability from cvelistv5

Published

2019-12-12 08:30

Modified

2024-08-04 18:49

Severity ?

CWE

Buffer Over-read Issue in NAS

Summary

While Skipping unknown IES, EMM is reading the buffer even if the no of bytes to read are more than message length which may cause device to shutdown in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9640, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8976, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, Snapdragon_High_Med_2016, SXR1130, SXR2130

References

▼	URL	Tags
	https://www.qualcomm.com/company/product-security/bulletins/november-2019-bulletin	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Qualcomm, Inc.	Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables	Version: APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9640, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8976, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, Snapdragon_High_Med_2016, SXR1130, SXR2130

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T18:49:47.418Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.qualcomm.com/company/product-security/bulletins/november-2019-bulletin"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables",
          "vendor": "Qualcomm, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9640, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8976, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, Snapdragon_High_Med_2016, SXR1130, SXR2130"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "While Skipping unknown IES, EMM is reading the buffer even if the no of bytes to read are more than message length which may cause device to shutdown in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9640, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8976, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, Snapdragon_High_Med_2016, SXR1130, SXR2130"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Buffer Over-read Issue in NAS",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-12-12T08:30:44",
        "orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
        "shortName": "qualcomm"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.qualcomm.com/company/product-security/bulletins/november-2019-bulletin"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@qualcomm.com",
          "ID": "CVE-2019-2337",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9640, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8976, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, Snapdragon_High_Med_2016, SXR1130, SXR2130"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Qualcomm, Inc."
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "While Skipping unknown IES, EMM is reading the buffer even if the no of bytes to read are more than message length which may cause device to shutdown in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9640, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8976, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, Snapdragon_High_Med_2016, SXR1130, SXR2130"
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Buffer Over-read Issue in NAS"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.qualcomm.com/company/product-security/bulletins/november-2019-bulletin",
              "refsource": "CONFIRM",
              "url": "https://www.qualcomm.com/company/product-security/bulletins/november-2019-bulletin"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
    "assignerShortName": "qualcomm",
    "cveId": "CVE-2019-2337",
    "datePublished": "2019-12-12T08:30:44",
    "dateReserved": "2018-12-10T00:00:00",
    "dateUpdated": "2024-08-04T18:49:47.418Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted