10

CVE-2019-2294

EPSS 0.91%
Veröffentlicht 30.09.2019 16:15:11
Zuletzt bearbeitet 21.11.2024 04:40:38
Erkennungen
Login

Usage of hard-coded magic number for calculating heap guard bytes can allow users to corrupt heap blocks without heap algorithm knowledge in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9655, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 47 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Qualcomm ≫ Mdm9205 Firmware Version -

Qualcomm ≫ Mdm9205 Version -

Qualcomm ≫ Mdm9206 Firmware Version -

Qualcomm ≫ Mdm9206 Version -

Qualcomm ≫ Mdm9607 Firmware Version -

Qualcomm ≫ Mdm9607 Version -

Qualcomm ≫ Mdm9615 Firmware Version -

Qualcomm ≫ Mdm9615 Version -

Qualcomm ≫ Mdm9625 Firmware Version -

Qualcomm ≫ Mdm9625 Version -

Qualcomm ≫ Mdm9635m Firmware Version -

Qualcomm ≫ Mdm9635m Version -

Qualcomm ≫ Mdm9655 Firmware Version -

Qualcomm ≫ Mdm9655 Version -

Qualcomm ≫ Msm8909w Firmware Version -

Qualcomm ≫ Msm8909w Version -

Qualcomm ≫ Msm8996au Firmware Version -

Qualcomm ≫ Msm8996au Version -

Qualcomm ≫ Qcs605 Firmware Version -

Qualcomm ≫ Qcs605 Version -

Qualcomm ≫ Qualcomm 215 Firmware Version -

Qualcomm ≫ Qualcomm 215 Version -

Qualcomm ≫ Sd 210 Firmware Version -

Qualcomm ≫ Sd 210 Version -

Qualcomm ≫ Sd 212 Firmware Version -

Qualcomm ≫ Sd 212 Version -

Qualcomm ≫ Sd 205 Firmware Version -

Qualcomm ≫ Sd 205 Version -

Qualcomm ≫ Sd 410 Firmware Version -

Qualcomm ≫ Sd 410 Version -

Qualcomm ≫ Sd 412 Firmware Version -

Qualcomm ≫ Sd 412 Version -

Qualcomm ≫ Sd 425 Firmware Version -

Qualcomm ≫ Sd 425 Version -

Qualcomm ≫ Sd 427 Firmware Version -

Qualcomm ≫ Sd 427 Version -

Qualcomm ≫ Sd 430 Firmware Version -

Qualcomm ≫ Sd 430 Version -

Qualcomm ≫ Sd 435 Firmware Version -

Qualcomm ≫ Sd 435 Version -

Qualcomm ≫ Sd 439 Firmware Version -

Qualcomm ≫ Sd 439 Version -

Qualcomm ≫ Sd 429 Firmware Version -

Qualcomm ≫ Sd 429 Version -

Qualcomm ≫ Sd 450 Firmware Version -

Qualcomm ≫ Sd 450 Version -

Qualcomm ≫ Sd 625 Firmware Version -

Qualcomm ≫ Sd 625 Version -

Qualcomm ≫ Sd 632 Firmware Version -

Qualcomm ≫ Sd 632 Version -

Qualcomm ≫ Sd 636 Firmware Version -

Qualcomm ≫ Sd 636 Version -

Qualcomm ≫ Sd 650 Firmware Version -

Qualcomm ≫ Sd 650 Version -

Qualcomm ≫ Sd 652 Firmware Version -

Qualcomm ≫ Sd 652 Version -

Qualcomm ≫ Sd 665 Firmware Version -

Qualcomm ≫ Sd 665 Version -

Qualcomm ≫ Sd 675 Firmware Version -

Qualcomm ≫ Sd 675 Version -

Qualcomm ≫ Sd 712 Firmware Version -

Qualcomm ≫ Sd 712 Version -

Qualcomm ≫ Sd 710 Firmware Version -

Qualcomm ≫ Sd 710 Version -

Qualcomm ≫ Sd 670 Firmware Version -

Qualcomm ≫ Sd 670 Version -

Qualcomm ≫ Sd 730 Firmware Version -

Qualcomm ≫ Sd 730 Version -

Qualcomm ≫ Sd 820 Firmware Version -

Qualcomm ≫ Sd 820 Version -

Qualcomm ≫ Sd 820a Firmware Version -

Qualcomm ≫ Sd 820a Version -

Qualcomm ≫ Sd 835 Firmware Version -

Qualcomm ≫ Sd 835 Version -

Qualcomm ≫ Sd 845 Firmware Version -

Qualcomm ≫ Sd 845 Version -

Qualcomm ≫ Sd 850 Firmware Version -

Qualcomm ≫ Sd 850 Version -

Qualcomm ≫ Sd 855 Firmware Version -

Qualcomm ≫ Sd 855 Version -

Qualcomm ≫ Sd 8cx Firmware Version -

Qualcomm ≫ Sd 8cx Version -

Qualcomm ≫ Sda660 Firmware Version -

Qualcomm ≫ Sda660 Version -

Qualcomm ≫ Sdm439 Firmware Version -

Qualcomm ≫ Sdm439 Version -

Qualcomm ≫ Sdm630 Firmware Version -

Qualcomm ≫ Sdm630 Version -

Qualcomm ≫ Sdm660 Firmware Version -

Qualcomm ≫ Sdm660 Version -

Qualcomm ≫ Snapdragon High Med 2016 Firmware Version -

Qualcomm ≫ Snapdragon High Med 2016 Version -

Qualcomm ≫ Sxr1130 Firmware Version -

Qualcomm ≫ Sxr1130 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.91%	0.552

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

CWE-330 Use of Insufficiently Random Values

The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.

https://www.qualcomm.com/company/product-security/bulletins

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2019-2294

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2019-2294

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2019-2294

EUVD