Lucene search

[email protected]CVE-2019-2276

HistoryJul 25, 2019 - 5:15 p.m.

CVE-2019-2276

2019-07-2517:15:12

CWE-125

[email protected]

web.nvd.nist.gov

cve-2019-2276

out of bound read

snapdragon

security vulnerability

nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

JSON

Possible out of bound read occurs while processing beaconing request due to lack of check on action frames received from user controlled space in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9607, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCS405, QCS605, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 845 / SD 850, SD 855, SDM630, SDM660, SDX24

CPE configuration

NVD

qualcommmdm9607_firmwareMatch-

AND

qualcommmdm9607Match-

CPENameOperatorVersion
qualcomm:mdm9607_firmwarequalcomm mdm9607 firmwareeq-
qualcomm:msm8996au_firmwarequalcomm msm8996au firmwareeq-
qualcomm:qca6174a_firmwarequalcomm qca6174a firmwareeq-
qualcomm:qca6574au_firmwarequalcomm qca6574au firmwareeq-
qualcomm:qca9377_firmwarequalcomm qca9377 firmwareeq-
qualcomm:qca9379_firmwarequalcomm qca9379 firmwareeq-
qualcomm:qcs405_firmwarequalcomm qcs405 firmwareeq-
qualcomm:qcs605_firmwarequalcomm qcs605 firmwareeq-
qualcomm:sd_636_firmwarequalcomm sd 636 firmwareeq-
qualcomm:sd_665_firmwarequalcomm sd 665 firmwareeq-

CPE	Name	Operator	Version
qualcomm:mdm9607_firmware	qualcomm mdm9607 firmware	eq	-
qualcomm:msm8996au_firmware	qualcomm msm8996au firmware	eq	-
qualcomm:qca6174a_firmware	qualcomm qca6174a firmware	eq	-
qualcomm:qca6574au_firmware	qualcomm qca6574au firmware	eq	-
qualcomm:qca9377_firmware	qualcomm qca9377 firmware	eq	-
qualcomm:qca9379_firmware	qualcomm qca9379 firmware	eq	-
qualcomm:qcs405_firmware	qualcomm qcs405 firmware	eq	-
qualcomm:qcs605_firmware	qualcomm qcs605 firmware	eq	-
qualcomm:sd_636_firmware	qualcomm sd 636 firmware	eq	-
qualcomm:sd_665_firmware	qualcomm sd 665 firmware	eq	-

Rows per page:

1-10 of 221

CNA Affected

[
  {
    "product": "Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "MDM9607, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCS405, QCS605, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 845 / SD 850, SD 855, SDM630, SDM660, SDX24"
      }
    ]
  }
]

References

www.codeaurora.org/security-bulletin/2019/07/01/july-2019-code-aurora-security-bulletin

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

JSON

Related for CVE-2019-2276

prion1 cvelist1 thn1