CVE-2019-2279

EUVD-2019-11921
Shared memory gets updated with invalid data and may lead to access beyond the allocated memory. in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCA6574AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24, Snapdragon_High_Med_2016
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 54%
Affected Products (NVD)
VendorProductVersion
qualcommmdm9150_firmware
-
qualcommmdm9607_firmware
-
qualcommmdm9650_firmware
-
qualcommmsm8909w_firmware
-
qualcommmsm8996au_firmware
-
qualcommqca6574au_firmware
-
qualcommqcs405_firmware
-
qualcommqcs605_firmware
-
qualcommqualcomm_215_firmware
-
qualcommsd_210_firmware
-
qualcommsd_212_firmware
-
qualcommsd_205_firmware
-
qualcommsd_425_firmware
-
qualcommsd_439_firmware
-
qualcommsd_429_firmware
-
qualcommsd_450_firmware
-
qualcommsd_625_firmware
-
qualcommsd_632_firmware
-
qualcommsd_636_firmware
-
qualcommsd_665_firmware
-
qualcommsd_675_firmware
-
qualcommsd_712_firmware
-
qualcommsd_710_firmware
-
qualcommsd_670_firmware
-
qualcommsd_730_firmware
-
qualcommsd_820_firmware
-
qualcommsd_820a_firmware
-
qualcommsd_835_firmware
-
qualcommsd_845_firmware
-
qualcommsd_850_firmware
-
qualcommsd_855_firmware
-
qualcommsda660_firmware
-
qualcommsdm439_firmware
-
qualcommsdm630_firmware
-
qualcommsdm660_firmware
-
qualcommsdx20_firmware
-
qualcommsdx24_firmware
-
qualcommsnapdragon_high_med_2016_firmware
-
𝑥
= Vulnerable software versions