CVE-2019-10482 | ByteOS Network

Vulnerability Details :

CVE-2019-10482

Assigner-qualcomm

Assigner Org ID-2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At-18 Dec, 2019 | 05:25

Updated At-04 Aug, 2024 | 22:24

Due to the use of non-time-constant comparison functions there is issue in timing side channels which can be used as a potential side channel for SUI corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9650, MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCS404, QCS405, QCS605, QM215, SA6155P, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:qualcomm

Assigner Org ID:2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At:18 Dec, 2019 | 05:25

Updated At:04 Aug, 2024 | 22:24

▼CVE Numbering Authority (CNA)

Due to the use of non-time-constant comparison functions there is issue in timing side channels which can be used as a potential side channel for SUI corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9650, MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCS404, QCS405, QCS605, QM215, SA6155P, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Affected Products

Vendor

Qualcomm Technologies, Inc.

Product

Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Versions

Affected

APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9650, MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCS404, QCS405, QCS605, QM215, SA6155P, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Problem Types

Type	CWE ID	Description
text	N/A	Information Exposure in Content Protection

Type: text

CWE ID: N/A

Description: Information Exposure in Content Protection

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/december-2019-bulletin	x_refsource_CONFIRM

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/december-2019-bulletin

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/december-2019-bulletin	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/december-2019-bulletin

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

Source:product-security@qualcomm.com

Published At:18 Dec, 2019 | 06:15

Updated At:24 Aug, 2020 | 17:37

Due to the use of non-time-constant comparison functions there is issue in timing side channels which can be used as a potential side channel for SUI corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9650, MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCS404, QCS405, QCS605, QM215, SA6155P, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	5.9	MEDIUM	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Primary	2.0	7.1	HIGH	AV:N/AC:M/Au:N/C:C/I:N/A:N

Type: Primary

Version: 3.1

Base score: 5.9

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Type: Primary

Version: 2.0

Base score: 7.1

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:N/A:N

CPE Matches

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8009:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8009_firmware>>-

cpe:2.3:o:qualcomm:apq8009_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8017:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8017_firmware>>-

cpe:2.3:o:qualcomm:apq8017_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8053:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8053_firmware>>-

cpe:2.3:o:qualcomm:apq8053_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8096:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8096_firmware>>-

cpe:2.3:o:qualcomm:apq8096_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8096au:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8096au_firmware>>-

cpe:2.3:o:qualcomm:apq8096au_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8098:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8098_firmware>>-

cpe:2.3:o:qualcomm:apq8098_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9150:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9150_firmware>>-

cpe:2.3:o:qualcomm:mdm9150_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9205:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9205_firmware>>-

cpe:2.3:o:qualcomm:mdm9205_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9206_firmware>>-

cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9607_firmware>>-

cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9650_firmware>>-

cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8905_firmware>>-

cpe:2.3:o:qualcomm:msm8905_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8905:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8909_firmware>>-

cpe:2.3:o:qualcomm:msm8909_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8909:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8917_firmware>>-

cpe:2.3:o:qualcomm:msm8917_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8917:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8920_firmware>>-

cpe:2.3:o:qualcomm:msm8920_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8920:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8937_firmware>>-

cpe:2.3:o:qualcomm:msm8937_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8937:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8940_firmware>>-

cpe:2.3:o:qualcomm:msm8940_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8940:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8953_firmware>>-

cpe:2.3:o:qualcomm:msm8953_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8953:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8996_firmware>>-

cpe:2.3:o:qualcomm:msm8996_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8996:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8996au_firmware>>-

cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8998_firmware>>-

cpe:2.3:o:qualcomm:msm8998_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8998:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>nicobar_firmware>>-

cpe:2.3:o:qualcomm:nicobar_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:nicobar:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qcs404_firmware>>-

cpe:2.3:o:qualcomm:qcs404_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qcs404:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qcs405_firmware>>-

cpe:2.3:o:qualcomm:qcs405_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qcs405:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qcs605_firmware>>-

cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qcs605:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.qualcomm.com/company/product-security/bulletins/december-2019-bulletin	product-security@qualcomm.com	Vendor Advisory

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/december-2019-bulletin

Source: product-security@qualcomm.com

Resource:

Vendor Advisory

Similar CVEs

2Records found

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.1||CRITICAL

EPSS-0.36% / 57.15%

||

7 Day CHG~0.00%

Published-14 Jun, 2022 | 10:11

Updated-03 Aug, 2024 | 22:32

Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-fsm10055 qca9377_firmware mdm9150_firmware wcn3991_firmware sd678 mdm9640_firmware sa6150p_firmware sa8145p_firmware qcs610 sm6250p_firmware wsa8830 qcs2290_firmware fsm10056 sd7c_firmware csrb31024 mdm9628_firmware mdm9650 fsm10055_firmware qcs4290 wcn3950_firmware mdm9250 sa8150p_firmware qca6420_firmware qca6595au_firmware qcs2290 sd730_firmware wcd9370 sd_675_firmware sd675_firmware qcs6125_firmware qca6584au_firmware qca9377 sa415m wcn3998 sdw2500_firmware sd_8cx_gen2_firmware wcn3950 mdm9628 sd720g mdm9206_firmware qsw8573_firmware sd662 sd460_firmware qca6584 qca6574au_firmware qca6595au sdx12_firmware wcd9375_firmware wcn3998_firmware msm8909w apq8009w_firmware qca6420 wcn3610_firmware mdm9207 qca6564au_firmware qca6584au sa6155p_firmware qca9367_firmware sd680_firmware wcd9306 mdm8207 sd_8cx_gen2 sd429 qca9367 qcs6125 qca4004_firmware mdm9607_firmware sd662_firmware mdm9655_firmware sa415m_firmware wcn3988_firmware qca6430 sa6145p_firmware sd205 sd429_firmware sm6250 wcd9306_firmware sa8195p apq8017_firmware sw5100 fsm10056_firmware sd680 sa6155p qca6174a_firmware mdm9250_firmware qcs4290_firmware mdm9655 qca6696_firmware wcn3910_firmware wcd9375 aqt1000 sa8150p sm6250_firmware mdm9207_firmware qca4004 wsa8830_firmware sda429w sd210 sd855_firmware sd660 wcn3620_firmware sdx20_firmware wcn3988 wsa8835_firmware sd660_firmware wcn3620 sa8195p_firmware apq8017 qca6564a wcn3610 qcm6125_firmware mdm9640 qcm2290_firmware wcn3991 sda429w_firmware wcd9380_firmware sd_675 sdm429w msm8996au_firmware sw5100p wcd9330 qca6564au sdx24 msm8909w_firmware qca6574 msm8996au sdm429w_firmware wsa8835 sd665_firmware wcd9380 sd850 sm6250p qcs410 qca6574a mdm9206 qca6174a sdx24_firmware qca6430_firmware sd439_firmware qsw8573 mdm9205 qca6574_firmware sd855 sd665 sd7c wcn3910 qca6584_firmware mdm9650_firmware qca6574a_firmware sd850_firmware sd460 sd730 sdxr1_firmware wcd9330_firmware aqt1000_firmware sd678_firmware qcm4290 csrb31024_firmware sdx20 qca6574au sa8155p_firmware mdm9607 sd205_firmware qca6564a_firmware apq8009w qcm6125 qcm4290_firmware sw5100p_firmware sd210_firmware qcs610_firmware mdm9150 sa6145p sdxr1 apq8096au sa8145p mdm8207_firmware qca6696 mdm9205_firmware wcd9370_firmware sa6150p sdw2500 apq8096au_firmware sa8155p sd675 sd439 sd720g_firmware sdx12 sw5100_firmware qcs410_firmware qcm2290 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-367

Time-of-check Time-of-use (TOCTOU) Race Condition

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.1||CRITICAL

EPSS-0.18% / 39.51%

||

7 Day CHG~0.00%

Published-14 Jun, 2022 | 10:11

Updated-03 Aug, 2024 | 22:32

Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

Product-wcn3991_firmware wsa8830 sd678 sm6250p_firmware qca8337 wcd9360_firmware sdx65 wcn3950_firmware sd765g_firmware qca6595au_firmware qca6390_firmware sd690_5g sd730_firmware wcd9370 sd_675_firmware sd675_firmware qca6426 wcn3998 wcd9385_firmware sdxr2_5g_firmware wcn3950 sd720g sd_8_gen1_5g_firmware sm6375_firmware sm7315_firmware qca6574au_firmware sdx55_firmware qca6595au qca8081_firmware wcd9375_firmware wcn3998_firmware sm7250p_firmware wcd9360 qca6436_firmware sd778g sa515m_firmware qcs6490 sdxr2_5g wcn3988_firmware sm6250 sd778g_firmware wsa8810_firmware sd765g sd765_firmware qca6436 wcn6851 qca8081 wcd9385 wcd9341 qca6696_firmware qcs6490_firmware sd750g sd870_firmware qca6390 ar8035 sd750g_firmware wcd9375 sm6250_firmware wsa8830_firmware sd865_5g_firmware qcm6490 sd888_5g_firmware wcn3988 wcn6850_firmware wsa8815_firmware wsa8835_firmware qcx315 sm8475 wcn6750_firmware sm6375 wcn3991 qca8337_firmware wcd9380_firmware sd_675 sd780g sd865_5g sdx55m_firmware wcn6856_firmware sd888 wsa8835 qcx315_firmware wcd9380 sd888_5g sm6250p qca6574a sd690_5g_firmware wcn6855_firmware sm7325p wcn3980 wcn6750 sa515m wsa8815 sm7325p_firmware wcn6850 sd765 qca6426_firmware qca6574a_firmware sd768g_firmware wcn3980_firmware sm7315 sd730 qca6391 sdx55m wcn6740_firmware sdx65_firmware sd678_firmware qcm6490_firmware sd480_firmware wcn6851_firmware qca6574au wcd9341_firmware sd480 sd870 wsa8810 wcn6855 wcn6856 sd768g wcn6740 qca6696 qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware sd675 sm7250p sd720g_firmware ar8035_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-367

Time-of-check Time-of-use (TOCTOU) Race Condition