CVE-2019-13995

CVE-2019-13995 is a high-severity vulnerability affecting numerous Qualcomm Snapdragon products, including various Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music, Wearables, and Wired Infrastructure and Networking platforms. It stems from a lack of integer overflow checks when adding fragment and remaining sizes from shared memory, leading to potential memory corruption and information leakage. With a CVSS score of 7.8 (HIGH), this vulnerability can be exploited locally with low attack complexity, resulting in high confidentiality, integrity, and availability impacts. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.