CVE-2019-2292 PUBLISHED CVSS 7.800000190734863 HIGH

Out of bound access can occur due to buffer copy without checking size of input received from WLAN firmware in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9650, MSM8996AU, QCA6574AU, QCS405, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 665, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24

EPSS 0.04% · 12.9th percentile

Risk Scores

CVSS v3.0
7.800000190734863
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.04%
12.9th percentile

Affected Products

VendorProductVersions
qualcommmdm9650_firmware
qualcommsd_212_firmware
qualcommmsm8996au_firmware
qualcommsdm630_firmware
qualcommsd_730_firmware
qualcommsd_665_firmware
qualcommsd_427_firmware
qualcommsd_205_firmware
qualcommsd_430_firmware
qualcommsd_210_firmware
qualcommqcs405_firmware
qualcommsd_435_firmware
qualcommsd_636_firmware
Qualcomm, Inc.Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & MusicMDM9150, MDM9650, MSM8996AU, QCA6574AU, QCS405, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 665, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24
qualcommsd_710_firmware
qualcommsd_820a_firmware
qualcommsd_835_firmware
qualcommsdx24_firmware
qualcommsd_670_firmware
qualcommsd_425_firmware

…and 12 more

Timeline

References

Open in Interactive Console →