CVE-2019-2297 PUBLISHED CVSS 7.800000190734863 HIGH

Buffer overflow can occur while processing non-standard NAN message from user space. in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, IPQ4019, IPQ8064, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCN7605, QCS405, QCS605, SDA660, SDA845, SDM636, SDM660, SDM845, SDX20, SDX24, SM8150

EPSS 0.05% · 16.9th percentile

Risk Scores

CVSS v3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.05%
16.9th percentile

Affected Products

VendorProductVersions
qualcommmdm9650_firmware
qualcommapq8096au_firmware
qualcommqcs405_firmware
qualcommmsm8905_firmware
qualcommsdm660_firmware
qualcommapq8053_firmware
qualcommqca6574au_firmware
qualcommmdm9206_firmware
qualcommmdm9207c_firmware
qualcommqca6174a_firmware
qualcommsdx24_firmware
qualcommmsm8996au_firmware
qualcommapq8009_firmware
qualcommapq8017_firmware
qualcommqca9377_firmware
qualcommsda660_firmware
qualcommipq8074_firmware
qualcommsdm845_firmware
qualcommsdm636_firmware
Qualcomm, Inc.Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingAPQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, IPQ4019, IPQ8064, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCN7605, QCS405, QCS605, SDA660, SDA845, SDM636, SDM660, SDM845, SDX20, SDX24, SM8150

…and 11 more

Timeline

References

Open in Interactive Console →