medium5.5
CVE-2019-14025
u'When a new session is created, Object is returned that contains TZ addresses and it get passed to HLOS as an handle to refer to a particular session and can …
Impact
u'When a new session is created, Object is returned that contains TZ addresses and it get passed to HLOS as an handle to refer to a particular session and can cause TZ to jump to a invalid address' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Kamorta, QCS404, QCS610, Rennell, SC7180, SDX55, SM6150, SM7150, SM8250, SXR2130
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qualcomm | Kamorta Firmware | All versions |
| Qualcomm | Qcs404 Firmware | All versions |
| Qualcomm | Qcs610 Firmware | All versions |
| Qualcomm | Rennell Firmware | All versions |
| Qualcomm | Sc7180 Firmware | All versions |
| Qualcomm | Sdx55 Firmware | All versions |
| Qualcomm | Sm6150 Firmware | All versions |
| Qualcomm | Sm7150 Firmware | All versions |
| Qualcomm | Sm8250 Firmware | All versions |
| Qualcomm | Sxr2130 Firmware | All versions |