CVE-2019-13998: Integer Overflow
u'Lack of check that the TX FIFO write and read indices that are read from shared RAM are less than the FIFO size results into memory corruption and potential information leakage' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, Bitra, IPQ6018, IPQ8074, Kamorta, MDM9150, MDM9205, MDM9206, MDM9607, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA8081, QCM2150, QCN7605, QCS404, QCS405, QCS605, QCS610, QM215, Rennell, SA415M, SA515M, SA6155P, Saipan, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-13998?
CVE-2019-13998 has a high severity level due to the potential for memory corruption and information leakage.
How do I fix CVE-2019-13998?
To fix CVE-2019-13998, update to the latest firmware version provided by Qualcomm.
What products are affected by CVE-2019-13998?
CVE-2019-13998 affects various Qualcomm products, including specific firmware versions of Android and multiple Snapdragon chipsets.
Is CVE-2019-13998 being actively exploited?
At this time, there are no confirmed reports of active exploitation of CVE-2019-13998.
What can happen if CVE-2019-13998 is not mitigated?
If left unmitigated, CVE-2019-13998 can lead to memory corruption and unauthorized data access.