CVE-2019-2245

EPSS 0.99%
Veröffentlicht 24.05.2019 17:29:02
Zuletzt bearbeitet 21.11.2024 04:40:31
Erkennungen
Login

Possible integer underflow can happen when calculating length of elementary stream map from invalid packet length which is later used to read from input buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SM7150, Snapdragon_High_Med_2016

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 41 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Qualcomm ≫ Mdm9206 Firmware Version -

Qualcomm ≫ Mdm9206 Version -

Qualcomm ≫ Mdm9607 Firmware Version -

Qualcomm ≫ Mdm9607 Version -

Qualcomm ≫ Mdm9650 Firmware Version -

Qualcomm ≫ Mdm9650 Version -

Qualcomm ≫ Msm8909w Firmware Version -

Qualcomm ≫ Msm8909w Version -

Qualcomm ≫ Msm8996au Firmware Version -

Qualcomm ≫ Msm8996au Version -

Qualcomm ≫ Qcs605 Firmware Version -

Qualcomm ≫ Qcs605 Version -

Qualcomm ≫ Qm215 Firmware Version -

Qualcomm ≫ Qm215 Version -

Qualcomm ≫ Sd 210 Firmware Version -

Qualcomm ≫ Sd 210 Version -

Qualcomm ≫ Sd 212 Firmware Version -

Qualcomm ≫ Sd 212 Version -

Qualcomm ≫ Sd 205 Firmware Version -

Qualcomm ≫ Sd 205 Version -

Qualcomm ≫ Sd 425 Firmware Version -

Qualcomm ≫ Sd 425 Version -

Qualcomm ≫ Sd 427 Firmware Version -

Qualcomm ≫ Sd 427 Version -

Qualcomm ≫ Sd 430 Firmware Version -

Qualcomm ≫ Sd 430 Version -

Qualcomm ≫ Sd 435 Firmware Version -

Qualcomm ≫ Sd 435 Version -

Qualcomm ≫ Sd 439 Firmware Version -

Qualcomm ≫ Sd 439 Version -

Qualcomm ≫ Sd 429 Firmware Version -

Qualcomm ≫ Sd 429 Version -

Qualcomm ≫ Sd 450 Firmware Version -

Qualcomm ≫ Sd 450 Version -

Qualcomm ≫ Sd 600 Firmware Version -

Qualcomm ≫ Sd 600 Version -

Qualcomm ≫ Sd 615 Firmware Version -

Qualcomm ≫ Sd 615 Version -

Qualcomm ≫ Sd 616 Firmware Version -

Qualcomm ≫ Sd 616 Version -

Qualcomm ≫ Sd 415 Firmware Version -

Qualcomm ≫ Sd 415 Version -

Qualcomm ≫ Sd 625 Firmware Version -

Qualcomm ≫ Sd 625 Version -

Qualcomm ≫ Sd 632 Firmware Version -

Qualcomm ≫ Sd 632 Version -

Qualcomm ≫ Sd 636 Firmware Version -

Qualcomm ≫ Sd 636 Version -

Qualcomm ≫ Sd 675 Firmware Version -

Qualcomm ≫ Sd 675 Version -

Qualcomm ≫ Sd 712 Firmware Version -

Qualcomm ≫ Sd 712 Version -

Qualcomm ≫ Sd 710 Firmware Version -

Qualcomm ≫ Sd 710 Version -

Qualcomm ≫ Sd 670 Firmware Version -

Qualcomm ≫ Sd 670 Version -

Qualcomm ≫ Sd 820 Firmware Version -

Qualcomm ≫ Sd 820 Version -

Qualcomm ≫ Sd 820a Firmware Version -

Qualcomm ≫ Sd 820a Version -

Qualcomm ≫ Sd 835 Firmware Version -

Qualcomm ≫ Sd 835 Version -

Qualcomm ≫ Sd 845 Firmware Version -

Qualcomm ≫ Sd 845 Version -

Qualcomm ≫ Sd 850 Firmware Version -

Qualcomm ≫ Sd 850 Version -

Qualcomm ≫ Sd 855 Firmware Version -

Qualcomm ≫ Sd 855 Version -

Qualcomm ≫ Sda660 Firmware Version -

Qualcomm ≫ Sda660 Version -

Qualcomm ≫ Sdm439 Firmware Version -

Qualcomm ≫ Sdm439 Version -

Qualcomm ≫ Sdm630 Firmware Version -

Qualcomm ≫ Sdm630 Version -

Qualcomm ≫ Sdm660 Firmware Version -

Qualcomm ≫ Sdm660 Version -

Qualcomm ≫ Sdx20 Firmware Version -

Qualcomm ≫ Sdx20 Version -

Qualcomm ≫ Sm7150 Firmware Version -

Qualcomm ≫ Sm7150 Version -

Qualcomm ≫ Snapdragon High Med 2016 Firmware Version -

Qualcomm ≫ Snapdragon High Med 2016 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.99%	0.579

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.8	3.9	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

CWE-191 Integer Underflow (Wrap or Wraparound)

The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

https://www.qualcomm.com/company/product-security/bulletins#_CVE-2019-2245

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2019-2245

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2019-2245

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2019-2245

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2019-2245