CVE-2019-2318
Non Secure Kernel can cause Trustzone to do an arbitrary memory read which will result into DOS in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon…
Does this matter?
Lower severity and a low EPSS score (0.17%). Track it; it rarely justifies an emergency change on its own.
Description
Non Secure Kernel can cause Trustzone to do an arbitrary memory read which will result into DOS in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8017, APQ8053, APQ8096, APQ8096AU, IPQ8074, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, QCA8081, QM215, SDM429, SDM439, SDM450, SDM632, Snapdragon_High_Med_2016
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.17% probability · 7th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-125
- Affected
- qualcomm/apq8017 firmware · qualcomm/apq8053 firmware · qualcomm/apq8096 firmware · qualcomm/apq8096au firmware · qualcomm/ipq8074 firmware · qualcomm/msm8917 firmware · qualcomm/msm8920 firmware · qualcomm/msm8937 firmware · qualcomm/msm8940 firmware · qualcomm/msm8953 firmware · qualcomm/msm8996 firmware · qualcomm/msm8996au firmware · qualcomm/qca8081 firmware · qualcomm/qm215 firmware · qualcomm/sdm429 firmware · qualcomm/sdm439 firmware · qualcomm/sdm450 firmware · qualcomm/sdm632 firmware · qualcomm/snapdragon high med 2016 firmware
- Source
- product-security@qualcomm.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.