CWE Code: 119
Vulnerability Type: privilege_escalation
CVSS Score: 10.0
CWE Name:  Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary: an unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains code execution in snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables in msm8909w, msm8996au, qcs605, qualcomm 215, sd 210/sd 212/sd 205, sd 425, sd 427, sd 430, sd 435, sd 439 / sd 429, sd 450, sd 625, sd 632, sd 636, sd 675, sd 712 / sd 710 / sd 670, sd 730, sd 820, sd 820a, sd 835, sd 845 / sd 850, sd 855, sd 8cx, sda660, sdm439, sdm630, sdm660, snapdragon_high_med_2016, sxr1130
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2019-06-14
Last Modified Date: 2019-06-17
You are a cybersecurity expert assistant. Provide detailed information about vulnerabilities in a clear and structured format.
system
Please provide details about this vulnerability:  Improper Restriction of Operations within the Bounds of a Memory Buffer.
user
CWE Code: 119
Vulnerability Type: privilege_escalation
CVSS Score: 10.0
CWE Name:  Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary: an unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains code execution in snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables in msm8909w, msm8996au, qcs605, qualcomm 215, sd 210/sd 212/sd 205, sd 425, sd 427, sd 430, sd 435, sd 439 / sd 429, sd 450, sd 625, sd 632, sd 636, sd 675, sd 712 / sd 710 / sd 670, sd 730, sd 820, sd 820a, sd 835, sd 845 / sd 850, sd 855, sd 8cx, sda660, sdm439, sdm630, sdm660, snapdragon_high_med_2016, sxr1130
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2019-06-14
Last Modified Date: 2019-06-17
assistant