Classic buffer overflow vulnerability while playing the specific video whose Decode picture buffer size is more than 16 in Snapdragon Auto,

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• qualcomm mdm9650 firmwareall versions
• qualcomm msm8909w firmwareall versions
• qualcomm msm8996au firmwareall versions
• qualcomm qcs605 firmwareall versions
• qualcomm qualcomm 215 firmwareall versions
• qualcomm sd 205 firmwareall versions
• qualcomm sd 210 firmwareall versions
• qualcomm sd 212 firmwareall versions
• qualcomm sd 425 firmwareall versions
• qualcomm sd 427 firmwareall versions
• qualcomm sd 429 firmwareall versions
• qualcomm sd 430 firmwareall versions
• qualcomm sd 435 firmwareall versions
• qualcomm sd 439 firmwareall versions
• qualcomm sd 450 firmwareall versions
• qualcomm sd 625 firmwareall versions
• qualcomm sd 632 firmwareall versions
• qualcomm sd 636 firmwareall versions
• qualcomm sd 665 firmwareall versions
• qualcomm sd 670 firmwareall versions

Versions reported by the vendor

Affected version ranges reported by the assigning authority (qualcomm). Independent of NVD's CPE analysis and usually ahead of it.

• Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

  • MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD affected

Other highest-scoring records for the same primary product.

• CVE-2019-2256An unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains code execution in Snapdragon Auto, Snapdrago
  39Monitor
• CVE-2016-10461In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9650, SD 650/52, SD 808, SD 810, SD 820, and S
  39Monitor
• CVE-2018-3589In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile MDM9650, MDM9655, SD 835, SD 845, SD 850, the vswr capture s
  39Monitor
• CVE-2017-18142In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile MDM9650, MDM9655, SD 835, SD 845, SD 850, while processing t
  39Monitor
• CVE-2017-18135In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile MDM9650, MDM9655, SD 450, SD 625, SD 650/52, SD 835, SD 845,
  39Monitor
• CVE-2018-11932Improper input validation can lead RW access to secure subsystem from HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,
  36Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Root cause

When data is copied, the source length is not compared with the size of the destination buffer. Excess data overwrites adjacent memory.

A representative example of this vulnerability class. Not the vendor's source code; it shows the faulty pattern and its fix.

1char buf[256];2memcpy(buf, pkt->data, pkt->len);

1char buf[256];2if (pkt->len > sizeof(buf)) {3  return -EINVAL;4}5memcpy(buf, pkt->data, pkt->len);

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.