CVE-2019-2329 PUBLISHED CVSS 7.800000190734863 HIGH

Use after free issue in cleanup routine due to missing pointer sanitization for a failed start of a trusted application. in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9205, QCS404, QCS605, SDA845, SDM670, SDM710, SDM845, SDX55, SM6150, SM7150, SM8150, SXR1130, SXR2130

EPSS 0.09% · 25.5th percentile

Risk Scores

CVSS v3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.09%
25.5th percentile

Affected Products

VendorProductVersions
qualcommsdm670_firmware
qualcommsda845_firmware
Qualcomm, Inc.Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and NetworkingMDM9205, QCS404, QCS605, SDA845, SDM670, SDM710, SDM845, SDX55, SM6150, SM7150, SM8150, SXR1130, SXR2130
qualcommsm6150_firmware
qualcommsxr1130_firmware
qualcommsxr2130_firmware
qualcommsm8150_firmware
qualcommsm7150_firmware
qualcommsdm710_firmware
qualcommmdm9205_firmware
qualcommqcs404_firmware
qualcommsdx55_firmware
qualcommqcs605_firmware
qualcommsdm845_firmware

Timeline

References

Open in Interactive Console →