7.8
CVE-2019-2238
- EPSS 0.2%
- Veröffentlicht 25.07.2019 17:15:12
- Zuletzt bearbeitet 21.11.2024 04:40:30
- Erkennungen
LoginLack of check of data type can lead to subsequent loop-expression potentially go negative and the condition will still evaluate to true leading to buffer underflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 8CX, SXR1130
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Mdm9206 Firmware Version -
Qualcomm ≫ Mdm9607 Firmware Version -
Qualcomm ≫ Mdm9650 Firmware Version -
Qualcomm ≫ Mdm9655 Firmware Version -
Qualcomm ≫ Qcs605 Firmware Version -
Qualcomm ≫ Sd 210 Firmware Version -
Qualcomm ≫ Sd 212 Firmware Version -
Qualcomm ≫ Sd 205 Firmware Version -
Qualcomm ≫ Sd 410 Firmware Version -
Qualcomm ≫ Sd 412 Firmware Version -
Qualcomm ≫ Sd 675 Firmware Version -
Qualcomm ≫ Sd 712 Firmware Version -
Qualcomm ≫ Sd 710 Firmware Version -
Qualcomm ≫ Sd 670 Firmware Version -
Qualcomm ≫ Sd 730 Firmware Version -
Qualcomm ≫ Sd 8cx Firmware Version -
Qualcomm ≫ Sxr1130 Firmware Version -
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.2% | 0.092 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.8 | 1.8 | 5.9 |
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| NIST | 4.6 | 3.9 | 6.4 |
AV:L/AC:L/Au:N/C:P/I:P/A:P
|
CWE-787 Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
https://www.qualcomm.com/company/product-security/bulletins