Qualcomm, Inc. Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
En bref
- Source
- NVD
- EPSS
- EPSS 0.21 % · centile 11 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- qualcomm
- Statut NVD
- Modified
Rechercher sur…
Description
User application could potentially make RPC call to the fastrpc driver and the driver will allow the message to go through to the remote subsystem in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.0 | HIGH 7.8 | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | NVD · nvd@nist.gov (Primary) |
| CVSS 2.0 | HIGH 7.2 | AV:L/AC:L/Au:N/C:C/I:C/A:C | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2019-11950
- GCVE · GCVE-0-2019-2308
Avis du CERT-FR
- CERTFR-2019-AVI-301 — Multiples vulnérabilités dans Google Android · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:o:qualcomm:mdm9150_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:qcs405_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:qualcomm_215_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:sd_427_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:sd_435_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:sd_439_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:sd_429_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:sd_632_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:sd_636_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:sd_665_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:sd_675_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:sd_712_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:sd_710_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:sd_670_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:sd_730_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:sd_855_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:sdm439_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:sdm630_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:sdx20_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:sdx24_firmware:-:*:*:*:*:*:*:*
Produits affectés
| Produit | Versions |
|---|---|
| Qualcomm, Inc. · Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables | affected MDM9150, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |