{"affected":[{"affectedData":[{"product":"Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking","vendor":"Qualcomm, Inc.","versions":[{"status":"affected","version":"APQ8017, APQ8053, APQ8096, APQ8096AU, IPQ8074, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, QCA8081, QM215, SDM429, SDM439, SDM450, SDM632, Snapdragon_High_Med_2016"}]}],"source":"product-security@qualcomm.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:apq8017_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"6FEDA6CA-A0FD-4A72-B856-C8E65AC86902","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:apq8017:-:*:*:*:*:*:*:*","matchCriteriaId":"8D29295A-7183-46BE-B4EE-F891D1C17ED9","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:apq8053_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"B052615D-857A-46D4-9098-1CBFA14687C6","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:apq8053:-:*:*:*:*:*:*:*","matchCriteriaId":"19B59B60-A298-4A56-A45A-E34B7AAB43D7","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:apq8096_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"CEFB4CC6-3271-48B1-9C1E-E2BE4E6AB9D5","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:apq8096:-:*:*:*:*:*:*:*","matchCriteriaId":"AD9B57D8-3066-4894-A8FC-962601F70210","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:apq8096au_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"DD17C0A3-A200-4659-968B-B2DA03CB683F","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:apq8096au:-:*:*:*:*:*:*:*","matchCriteriaId":"B1F31FFB-982A-4308-82F8-C2480DABDED8","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:ipq8074_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"2914BF98-E69C-4C8D-8B10-759642ADD7B4","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:ipq8074:-:*:*:*:*:*:*:*","matchCriteriaId":"2118C404-402F-463C-8160-3CC3B703DF30","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:msm8917_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"9BD0305A-E31C-4888-B97E-CE571D40560A","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:msm8917:-:*:*:*:*:*:*:*","matchCriteriaId":"369295A2-8236-44B6-A09F-7CB0BD20527F","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:msm8920_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"88413610-9B54-485B-A7A7-8CE4D68D6C9E","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:msm8920:-:*:*:*:*:*:*:*","matchCriteriaId":"50F55EB4-B6C3-41FE-9B8F-F17D94F170F2","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:msm8937_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"F3D56596-D726-44FD-ADEA-901D972AC66A","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:msm8937:-:*:*:*:*:*:*:*","matchCriteriaId":"A58B5A6E-84B9-4356-9CFE-4E80BD81FB33","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:msm8940_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"372B5A77-74D4-437F-A228-040963861232","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:msm8940:-:*:*:*:*:*:*:*","matchCriteriaId":"68AF5243-40F1-4C9A-BBCD-FA259C0B008B","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:msm8953_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"BE4E0E39-0081-4261-8350-149E763AB462","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:msm8953:-:*:*:*:*:*:*:*","matchCriteriaId":"94F76229-1A4A-4306-A4CC-C823A99F041A","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:msm8996_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"F25AB827-02D7-4FDE-BFB7-3F5DE8071477","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:msm8996:-:*:*:*:*:*:*:*","matchCriteriaId":"8AAB0FCA-8F94-4FB1-ACCC-02E0222BAE49","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"8CA1E7B0-782B-4757-B118-802943798984","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*","matchCriteriaId":"95CB08EC-AE12-4A54-AA3C-998F01FC8763","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"1D1C53DC-D2F3-4C92-9725-9A85340AF026","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:qca8081:-:*:*:*:*:*:*:*","matchCriteriaId":"ED0585FF-E390-46E8-8701-70964A4057BB","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:qm215_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"F18CD1F1-C36A-4840-88CD-8F00BD68EF1A","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:qm215:-:*:*:*:*:*:*:*","matchCriteriaId":"6A01800E-994E-4095-AD86-F02DC9D9C86E","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sdm429_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"9DFD2C9A-6C25-4B8F-BE64-DAD3DCCDEADD","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sdm429:-:*:*:*:*:*:*:*","matchCriteriaId":"8DE61FCE-CA87-46E1-981D-B44697E54CB1","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sdm439_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"84289E6D-DA2A-4D04-9DDA-E8C46DDDD056","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sdm439:-:*:*:*:*:*:*:*","matchCriteriaId":"C0B56360-7AC3-410A-B7F8-1BE8514B3781","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sdm450_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"8F3B5AFF-4AD4-4C10-9E39-C553C7E9E16E","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sdm450:-:*:*:*:*:*:*:*","matchCriteriaId":"A09E7B90-DD7B-4617-90FD-29FF5BB190A9","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sdm632_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"A02E12AC-F845-4164-9D95-ACD7167B6DD6","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sdm632:-:*:*:*:*:*:*:*","matchCriteriaId":"321F7DE7-E6E9-449F-867B-04A9F53334B0","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:snapdragon_high_med_2016_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"706B5BF5-3803-4D3C-8A3B-34D30D8B36F9","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:snapdragon_high_med_2016:-:*:*:*:*:*:*:*","matchCriteriaId":"C69745BA-DE6A-4646-959D-C45166559952","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Non Secure Kernel can cause Trustzone to do an arbitrary memory read which will result into DOS in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8017, APQ8053, APQ8096, APQ8096AU, IPQ8074, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, QCA8081, QM215, SDM429, SDM439, SDM450, SDM632, Snapdragon_High_Med_2016"},{"lang":"es","value":"El kernel no seguro puede causar que Trustzone cause una lectura de memoria arbitraria que resultará en una DOS en los productos Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking en las versiones APQ8017, APQ8053, APQ8096, APQ8096AU, IPQ8074, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, QCA8081, QM215, SDM429, SDM439, SDM450, SDM632, Snapdragon_High_Med_2016."}],"id":"CVE-2019-2318","lastModified":"2026-06-17T02:33:39.987","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"LOW","cvssData":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1,"confidentialityImpact":"NONE","integrityImpact":"NONE","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","version":"2.0"},"exploitabilityScore":3.9,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2019-11-21T15:15:16.230","references":[{"source":"product-security@qualcomm.com","tags":["Vendor Advisory"],"url":"https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin"}],"sourceIdentifier":"product-security@qualcomm.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-125"}],"source":"nvd@nist.gov","type":"Primary"}]}