CVE-2019-2318
First published: Mon Oct 07 2019(Updated: )
Non Secure Kernel can cause Trustzone to do an arbitrary memory read which will result into DOS in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8017, APQ8053, APQ8096, APQ8096AU, IPQ8074, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, QCA8081, QM215, SDM429, SDM439, SDM450, SDM632, Snapdragon_High_Med_2016
Credit: product-security@qualcomm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Android | ||
| Qualcomm APQ8017 | ||
| Qualcomm APQ8017 | ||
| qualcomm apq8053-ac firmware | ||
| Qualcomm APQ8053 Firmware | ||
| Qualcomm APQ8096AU Firmware | ||
| qualcomm APQ8096SG | ||
| Qualcomm APQ8096AU Firmware | ||
| Qualcomm APQ8096AU Firmware | ||
| Qualcomm IPQ8074 Firmware | ||
| Qualcomm IPQ8074A | ||
| Qualcomm MSM8917 | ||
| Qualcomm MSM8917 Firmware | ||
| Qualcomm 8920 Firmware | ||
| Qualcomm 8920 | ||
| Qualcomm 8937 Firmware | ||
| qualcomm MSM8937 firmware | ||
| qualcomm MSM8940 firmware | ||
| Qualcomm 8940 | ||
| Qualcomm 8953 Firmware | ||
| Qualcomm MSM8953 Firmware | ||
| Qualcomm 8996 Firmware | ||
| Qualcomm Snapdragon 8996 | ||
| qualcomm MSM8996AU firmware | ||
| Qualcomm MSM8996AU Firmware | ||
| Qualcomm QCA8081 firmware | ||
| Qualcomm QCA8081 firmware | ||
| Qualcomm 215 Firmware | ||
| Qualcomm 215 | ||
| Qualcomm SDM429W | ||
| Qualcomm SD429 | ||
| qualcomm SDM439 firmware | ||
| Qualcomm SDM439 Firmware | ||
| Qualcomm SD 450 Firmware | ||
| Qualcomm Snapdragon 450 | ||
| Qualcomm SDM632 | ||
| Qualcomm SDM632 | ||
| Qualcomm Snapdragon High Med 2016 | ||
| Qualcomm Snapdragon High Med 2016 Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID is CVE-2019-2318.
What is the severity of CVE-2019-2318?
The severity of CVE-2019-2318 is high with a CVSS score of 5.5.
Which products are affected by CVE-2019-2318?
CVE-2019-2318 affects Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in various Qualcomm processors.
How can CVE-2019-2318 result in a denial-of-service (DoS) attack?
CVE-2019-2318 can result in a DoS attack by causing Trustzone to perform an arbitrary memory read.
Where can I find more information about CVE-2019-2318?
You can find more information about CVE-2019-2318 in the October 2019 bulletin by Qualcomm and the Android security bulletin of October 2019.
- agent/type
- agent/first-publish-date
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/event
- agent/last-modified-date
- agent/source
- collector/android-source
- source/Android
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- vendor/google
- canonical/android
- vendor/qualcomm
- canonical/qualcomm apq8017
- canonical/qualcomm apq8053-ac firmware
- canonical/qualcomm apq8053 firmware
- canonical/qualcomm apq8096au firmware
- canonical/qualcomm apq8096sg
- canonical/qualcomm ipq8074 firmware
- canonical/qualcomm ipq8074a
- canonical/qualcomm msm8917
- canonical/qualcomm msm8917 firmware
- canonical/qualcomm 8920 firmware
- canonical/qualcomm 8920
- canonical/qualcomm 8937 firmware
- canonical/qualcomm msm8937 firmware
- canonical/qualcomm msm8940 firmware
- canonical/qualcomm 8940
- canonical/qualcomm 8953 firmware
- canonical/qualcomm msm8953 firmware
- canonical/qualcomm 8996 firmware
- canonical/qualcomm snapdragon 8996
- canonical/qualcomm msm8996au firmware
- canonical/qualcomm qca8081 firmware
- canonical/qualcomm 215 firmware
- canonical/qualcomm 215
- canonical/qualcomm sdm429w
- canonical/qualcomm sd429
- canonical/qualcomm sdm439 firmware
- canonical/qualcomm sd 450 firmware
- canonical/qualcomm snapdragon 450
- canonical/qualcomm sdm632
- canonical/qualcomm snapdragon high med 2016
- canonical/qualcomm snapdragon high med 2016 firmware