CVE-2019-2288

🗓️ 12 Dec 2019 08:30:42Reported by qualcommType

Out of bound write in TZ while copying the secure dump structure on HLOS provided buffer as part of memory dump in Snapdragon device

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2019-2288	10 Mar 202416:16	–	circl
CNVD	Buffer Overflow Vulnerability in Multiple Qualcomm Products (CNVD-2020-16070)	14 Nov 201900:00	–	cnvd
Cvelist	CVE-2019-2288	12 Dec 201908:30	–	cvelist
EUVD	EUVD-2019-11930	7 Oct 202500:30	–	euvd
NVD	CVE-2019-2288	12 Dec 201909:15	–	nvd
Prion	Design/Logic Flaw	12 Dec 201909:15	–	prion
RedhatCVE	CVE-2019-2288	22 May 202510:14	–	redhatcve

NVD

Node

qualcomm apq8009_firmwareMatch-

AND

qualcomm apq8009Match-

Node

qualcomm apq8017_firmwareMatch-

AND

qualcomm apq8017Match-

Node

qualcomm apq8053_firmwareMatch-

AND

qualcomm apq8053Match-

Node

qualcomm apq8096_firmwareMatch-

AND

qualcomm apq8096Match-

Node

qualcomm apq8096au_firmwareMatch-

AND

qualcomm apq8096auMatch-

Node

qualcomm apq8098_firmwareMatch-

AND

qualcomm apq8098Match-

Node

qualcomm ipq8074_firmwareMatch-

AND

qualcomm ipq8074Match-

Node

qualcomm mdm9150_firmwareMatch-

AND

qualcomm mdm9150Match-

Node

qualcomm mdm9206_firmwareMatch-

AND

qualcomm mdm9206Match-

Node

qualcomm mdm9607_firmwareMatch-

AND

qualcomm mdm9607Match-

Node

qualcomm mdm9650_firmwareMatch-

AND

qualcomm mdm9650Match-

Node

qualcomm msm8905_firmwareMatch-

AND

qualcomm msm8905Match-

Node

qualcomm msm8909_firmwareMatch-

AND

qualcomm msm8909Match-

Node

qualcomm msm8917_firmwareMatch-

AND

qualcomm msm8917Match-

Node

qualcomm msm8920_firmwareMatch-

AND

qualcomm msm8920Match-

Node

qualcomm msm8937_firmwareMatch-

AND

qualcomm msm8937Match-

Node

qualcomm msm8940_firmwareMatch-

AND

qualcomm msm8940Match-

Node

qualcomm msm8953_firmwareMatch-

AND

qualcomm msm8953Match-

Node

qualcomm msm8976_firmwareMatch-

AND

qualcomm msm8976Match-

Node

qualcomm msm8996_firmwareMatch-

AND

qualcomm msm8996Match-

Node

qualcomm msm8996au_firmwareMatch-

AND

qualcomm msm8996auMatch-

Node

qualcomm msm8998_firmwareMatch-

AND

qualcomm msm8998Match-

Node

qualcomm qca8081_firmwareMatch-

AND

qualcomm qca8081Match-

Node

qualcomm qcs605_firmwareMatch-

AND

qualcomm qcs605Match-

Node

qualcomm qm215_firmwareMatch-

AND

qualcomm qm215Match-

Node

qualcomm sda660_firmwareMatch-

AND

qualcomm sda660Match-

Node

qualcomm sda845_firmwareMatch-

AND

qualcomm sda845Match-

Node

qualcomm sdm429_firmwareMatch-

AND

qualcomm sdm429Match-

Node

qualcomm sdm439_firmwareMatch-

AND

qualcomm sdm439Match-

Node

qualcomm sdm450_firmwareMatch-

AND

qualcomm sdm450Match-

Node

qualcomm sdm630_firmwareMatch-

AND

qualcomm sdm630Match-

Node

qualcomm sdm632_firmwareMatch-

AND

qualcomm sdm632Match-

Node

qualcomm sdm636_firmwareMatch-

AND

qualcomm sdm636Match-

Node

qualcomm sdm660_firmwareMatch-

AND

qualcomm sdm660Match-

Node

qualcomm sdm670_firmwareMatch-

AND

qualcomm sdm670Match-

Node

qualcomm sdm710_firmwareMatch-

AND

qualcomm sdm710Match-

Node

qualcomm sdm845_firmwareMatch-

AND

qualcomm sdm845Match-

Node

qualcomm sdm850_firmwareMatch-

AND

qualcomm sdm850Match-

Node

qualcomm snapdragon_high_med_2016_firmwareMatch-

AND

qualcomm snapdragon_high_med_2016Match-

Node

qualcomm sxr1130_firmwareMatch-

AND

qualcomm sxr1130Match-

[
  {
    "product": "Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, IPQ8074, MDM9150, MDM9206, MDM9607, MDM9650, MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8976, MSM8996, MSM8996AU, MSM8998, QCA8081, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, Snapdragon_High_Med_2016, SXR1130"
      }
    ]
  }
]

Source	Link
qualcomm	www.qualcomm.com/company/product-security/bulletins/november-2019-bulletin

21 Nov 2024 04:40Current

7.8High risk

Vulners AI Score7.8

CVSS 27.2

CVSS 3.17.8

EPSS0.00094

CWE-120

cve-2019-2288 out of bound write tz memory dump snapdragon nvd