10

CVE-2019-2249

Kernel can do a memory read from arbitrary address passed by user during execution of a syscall in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ8074, MDM9205, MDM9650, QCA8081, QCS605, SD 427, SD 435, SD 450, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016, SXR1130
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Ipq8074 Firmware Version -
   Qualcomm ≫ Ipq8074 Version -
Qualcomm ≫ Mdm9205 Firmware Version -
   Qualcomm ≫ Mdm9205 Version -
Qualcomm ≫ Mdm9650 Firmware Version -
   Qualcomm ≫ Mdm9650 Version -
Qualcomm ≫ Qca8081 Firmware Version -
   Qualcomm ≫ Qca8081 Version -
Qualcomm ≫ Qcs605 Firmware Version -
   Qualcomm ≫ Qcs605 Version -
Qualcomm ≫ Sd 427 Firmware Version -
   Qualcomm ≫ Sd 427 Version -
Qualcomm ≫ Sd 435 Firmware Version -
   Qualcomm ≫ Sd 435 Version -
Qualcomm ≫ Sd 450 Firmware Version -
   Qualcomm ≫ Sd 450 Version -
Qualcomm ≫ Sd 625 Firmware Version -
   Qualcomm ≫ Sd 625 Version -
Qualcomm ≫ Sd 636 Firmware Version -
   Qualcomm ≫ Sd 636 Version -
Qualcomm ≫ Sd 665 Firmware Version -
   Qualcomm ≫ Sd 665 Version -
Qualcomm ≫ Sd 675 Firmware Version -
   Qualcomm ≫ Sd 675 Version -
Qualcomm ≫ Sd 712 Firmware Version -
   Qualcomm ≫ Sd 712 Version -
Qualcomm ≫ Sd 710 Firmware Version -
   Qualcomm ≫ Sd 710 Version -
Qualcomm ≫ Sd 670 Firmware Version -
   Qualcomm ≫ Sd 670 Version -
Qualcomm ≫ Sd 730 Firmware Version -
   Qualcomm ≫ Sd 730 Version -
Qualcomm ≫ Sd 835 Firmware Version -
   Qualcomm ≫ Sd 835 Version -
Qualcomm ≫ Sd 845 Firmware Version -
   Qualcomm ≫ Sd 845 Version -
Qualcomm ≫ Sd 850 Firmware Version -
   Qualcomm ≫ Sd 850 Version -
Qualcomm ≫ Sd 855 Firmware Version -
   Qualcomm ≫ Sd 855 Version -
Qualcomm ≫ Sd 8cx Firmware Version -
   Qualcomm ≫ Sd 8cx Version -
Qualcomm ≫ Sda660 Firmware Version -
   Qualcomm ≫ Sda660 Version -
Qualcomm ≫ Sdm630 Firmware Version -
   Qualcomm ≫ Sdm630 Version -
Qualcomm ≫ Sdm660 Firmware Version -
   Qualcomm ≫ Sdm660 Version -
Qualcomm ≫ Sdx20 Firmware Version -
   Qualcomm ≫ Sdx20 Version -
Qualcomm ≫ Sxr1130 Firmware Version -
   Qualcomm ≫ Sxr1130 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.43% 0.695
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

https://source.android.com/security/bulletin/
Vendor Advisory