CVE-2019-13995

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

u'Lack of integer overflow check for addition of fragment size and remaining size that are read from shared memory can lead to memory corruption and potential information leakage' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, Bitra, IPQ6018, IPQ8074, Kamorta, MDM9150, MDM9205, MDM9206, MDM9607, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA8081, QCM2150, QCN7605, QCS404, QCS405, QCS605, QCS610, QM215, Rennell, SA415M, SA6155P, Saipan, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190 CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Sep 8, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-139987.8u'Lack of check that the TX FIFO write and read indices that are read from shared RAM are less than the FIFO size results into memory corrup CVE-2019-139997.8u'Lack of check for integer overflow for round up and addition operations result into memory corruption and potential information leakage' i CVE-2019-14005.5An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, ak CVE-2019-140007.8Lack of check that the RX FIFO write index that is read from shared RAM is less than the FIFO size results into memory corruption and potent CVE-2019-140017.8Wrong public key usage from existing oem_keystore for hash generation in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT CVE-2019-140027.8APKs without proper permission may bind to CallEnhancementService and can lead to unauthorized access to call status in Snapdragon Auto, Sna CVE-2019-140037.5Null pointer exception can happen while parsing invalid MKV clip where cue information is parsed before segment information in Snapdragon Au CVE-2019-140049.8Buffer overflow occurs while processing invalid MKV clip, which has invalid EBML size in Snapdragon Auto, Snapdragon Compute, Snapdragon Con CVE-2019-140059.8Buffer overflow occur while playing the clip which is nonstandard due to lack of check of size duration in Snapdragon Auto, Snapdragon Compu CVE-2019-140069.8Buffer overflow occur while playing the clip which is nonstandard due to lack of offset length check in Snapdragon Auto, Snapdragon Compute,CVE-2019-140075.5Due to the use of non-time-constant comparison functions there is issue in timing side channels which can be used as a potential side channe CVE-2019-140087.5Possible null pointer dereference issue in location assistance data processing due to missing null check on resources before using it in Sna