CVE-2019-2304

🗓️ 18 Dec 2019 05:25:51Reported by qualcommType

CVE-2019-2304 Integer overflow to buffer overflow due to lack of validation of event arguments received from firmware in multiple Snapdragon platforms

Reporter	Title	Published	Views	Family All 6
Circl	CVE-2019-2304	11 Dec 201903:00	–	circl
Cvelist	CVE-2019-2304	18 Dec 201905:25	–	cvelist
EUVD	EUVD-2019-11946	7 Oct 202500:30	–	euvd
NVD	CVE-2019-2304	18 Dec 201906:15	–	nvd
Prion	Integer overflow	18 Dec 201906:15	–	prion
RedhatCVE	CVE-2019-2304	9 Jan 202610:16	–	redhatcve

NVD

Node

qualcomm ipq4019_firmwareMatch-

AND

qualcomm ipq4019Match-

Node

qualcomm ipq8064_firmwareMatch-

AND

qualcomm ipq8064Match-

Node

qualcomm ipq8074_firmwareMatch-

AND

qualcomm ipq8074Match-

Node

qualcomm mdm9607_firmwareMatch-

AND

qualcomm mdm9607Match-

Node

qualcomm msm8917_firmwareMatch-

AND

qualcomm msm8917Match-

Node

qualcomm msm8920_firmwareMatch-

AND

qualcomm msm8920Match-

Node

qualcomm msm8937_firmwareMatch-

AND

qualcomm msm8937Match-

Node

qualcomm msm8940_firmwareMatch-

AND

qualcomm msm8940Match-

Node

qualcomm qcn7605_firmwareMatch-

AND

qualcomm qcn7605Match-

Node

qualcomm qcs405_firmwareMatch-

AND

qualcomm qcs405Match-

Node

qualcomm qcs605_firmwareMatch-

AND

qualcomm qcs605Match-

Node

qualcomm sda845_firmwareMatch-

AND

qualcomm sda845Match-

Node

qualcomm sdm660_firmwareMatch-

AND

qualcomm sdm660Match-

Node

qualcomm sdm845_firmwareMatch-

AND

qualcomm sdm845Match-

Node

qualcomm sdx24_firmwareMatch-

AND

qualcomm sdx24Match-

Node

qualcomm sdx55_firmwareMatch-

AND

qualcomm sdx55Match-

Node

qualcomm sm6150_firmwareMatch-

AND

qualcomm sm6150Match-

Node

qualcomm sm7150_firmwareMatch-

AND

qualcomm sm7150Match-

Node

qualcomm sm8150_firmwareMatch-

AND

qualcomm sm8150Match-

Node

qualcomm sxr1130_firmwareMatch-

AND

qualcomm sxr1130Match-

[
  {
    "product": "Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "IPQ4019, IPQ8064, IPQ8074, MDM9607, MSM8917, MSM8920, MSM8937, MSM8940, QCN7605, QCS405, QCS605, SDA845, SDM660, SDM845, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130"
      }
    ]
  }
]

Source	Link
qualcomm	www.qualcomm.com/company/product-security/bulletins/december-2019-bulletin

21 Nov 2024 04:40Current

7.9High risk

Vulners AI Score7.9

CVSS 27.2

CVSS 3.17.8

EPSS0.00035

cve-2019-2304 integer overflow buffer overflow snapdragon qualcomm firmware security vulnerability