CVE-2019-2318
First published: Mon Oct 07 2019(Updated: )
Non Secure Kernel can cause Trustzone to do an arbitrary memory read which will result into DOS in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8017, APQ8053, APQ8096, APQ8096AU, IPQ8074, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, QCA8081, QM215, SDM429, SDM439, SDM450, SDM632, Snapdragon_High_Med_2016
Credit: product-security@qualcomm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Google Android | ||
| Qualcomm Apq8017 Firmware | ||
| Qualcomm Apq8017 | ||
| Qualcomm Apq8053 Firmware | ||
| Qualcomm Apq8053 | ||
| Qualcomm Apq8096 Firmware | ||
| Google Android | ||
| Qualcomm Apq8096au Firmware | ||
| Qualcomm Apq8096au | ||
| Qualcomm Ipq8074 Firmware | ||
| Qualcomm Ipq8074 | ||
| Qualcomm Msm8917 Firmware | ||
| Qualcomm Msm8917 | ||
| Qualcomm Msm8920 Firmware | ||
| Qualcomm Msm8920 | ||
| Qualcomm Msm8937 Firmware | ||
| Qualcomm Msm8937 | ||
| Qualcomm Msm8940 Firmware | ||
| Qualcomm Msm8940 | ||
| Qualcomm Msm8953 Firmware | ||
| Qualcomm Msm8953 | ||
| Qualcomm Msm8996 Firmware | ||
| Google Android | ||
| Qualcomm Msm8996au Firmware | ||
| Qualcomm Msm8996au | ||
| Qualcomm Qca8081 Firmware | ||
| Qualcomm Qca8081 | ||
| Qualcomm Qm215 Firmware | ||
| Qualcomm Qm215 | ||
| Qualcomm Sdm429 Firmware | ||
| Qualcomm Sdm429 | ||
| Qualcomm Sdm439 Firmware | ||
| Qualcomm Sdm439 | ||
| Qualcomm Sdm450 Firmware | ||
| Qualcomm SDM450 | ||
| Qualcomm Sdm632 Firmware | ||
| Qualcomm Sdm632 | ||
| Qualcomm Snapdragon High Med 2016 Firmware | ||
| Qualcomm Snapdragon High Med 2016 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID is CVE-2019-2318.
What is the severity of CVE-2019-2318?
The severity of CVE-2019-2318 is high with a CVSS score of 5.5.
Which products are affected by CVE-2019-2318?
CVE-2019-2318 affects Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in various Qualcomm processors.
How can CVE-2019-2318 result in a denial-of-service (DoS) attack?
CVE-2019-2318 can result in a DoS attack by causing Trustzone to perform an arbitrary memory read.
Where can I find more information about CVE-2019-2318?
You can find more information about CVE-2019-2318 in the October 2019 bulletin by Qualcomm and the Android security bulletin of October 2019.
- agent/type
- agent/first-publish-date
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/description
- agent/event
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/android-source
- source/Android
- agent/software-canonical-lookup
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/qualcomm
- canonical/qualcomm apq8017 firmware
- canonical/qualcomm apq8017
- canonical/qualcomm apq8053 firmware
- canonical/qualcomm apq8053
- canonical/qualcomm apq8096 firmware
- canonical/google android
- canonical/qualcomm apq8096au firmware
- canonical/qualcomm apq8096au
- canonical/qualcomm ipq8074 firmware
- canonical/qualcomm ipq8074
- canonical/qualcomm msm8917 firmware
- canonical/qualcomm msm8917
- canonical/qualcomm msm8920 firmware
- canonical/qualcomm msm8920
- canonical/qualcomm msm8937 firmware
- canonical/qualcomm msm8937
- canonical/qualcomm msm8940 firmware
- canonical/qualcomm msm8940
- canonical/qualcomm msm8953 firmware
- canonical/qualcomm msm8953
- canonical/qualcomm msm8996 firmware
- canonical/qualcomm msm8996au firmware
- canonical/qualcomm msm8996au
- canonical/qualcomm qca8081 firmware
- canonical/qualcomm qca8081
- canonical/qualcomm qm215 firmware
- canonical/qualcomm qm215
- canonical/qualcomm sdm429 firmware
- canonical/qualcomm sdm429
- canonical/qualcomm sdm439 firmware
- canonical/qualcomm sdm439
- canonical/qualcomm sdm450 firmware
- canonical/qualcomm sdm450
- canonical/qualcomm sdm632 firmware
- canonical/qualcomm sdm632
- canonical/qualcomm snapdragon high med 2016 firmware
- canonical/qualcomm snapdragon high med 2016
- vendor/google