7

CVE-2019-2345

Race condition while accessing DMA buffer in jpeg driver in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MSM8909W, MSM8996AU, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDM660, SDX20, SDX24
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Msm8909w Firmware Version -
   Qualcomm ≫ Msm8909w Version -
Qualcomm ≫ Msm8996au Firmware Version -
   Qualcomm ≫ Msm8996au Version -
Qualcomm ≫ Qcs605 Firmware Version -
   Qualcomm ≫ Qcs605 Version -
Qualcomm ≫ Sd 425 Firmware Version -
   Qualcomm ≫ Sd 425 Version -
Qualcomm ≫ Sd 427 Firmware Version -
   Qualcomm ≫ Sd 427 Version -
Qualcomm ≫ Sd 430 Firmware Version -
   Qualcomm ≫ Sd 430 Version -
Qualcomm ≫ Sd 435 Firmware Version -
   Qualcomm ≫ Sd 435 Version -
Qualcomm ≫ Sd 450 Firmware Version -
   Qualcomm ≫ Sd 450 Version -
Qualcomm ≫ Sd 625 Firmware Version -
   Qualcomm ≫ Sd 625 Version -
Qualcomm ≫ Sd 636 Firmware Version -
   Qualcomm ≫ Sd 636 Version -
Qualcomm ≫ Sd 712 Firmware Version -
   Qualcomm ≫ Sd 712 Version -
Qualcomm ≫ Sd 710 Firmware Version -
   Qualcomm ≫ Sd 710 Version -
Qualcomm ≫ Sd 670 Firmware Version -
   Qualcomm ≫ Sd 670 Version -
Qualcomm ≫ Sd 820 Firmware Version -
   Qualcomm ≫ Sd 820 Version -
Qualcomm ≫ Sd 820a Firmware Version -
   Qualcomm ≫ Sd 820a Version -
Qualcomm ≫ Sd 835 Firmware Version -
   Qualcomm ≫ Sd 835 Version -
Qualcomm ≫ Sd 845 Firmware Version -
   Qualcomm ≫ Sd 845 Version -
Qualcomm ≫ Sd 850 Firmware Version -
   Qualcomm ≫ Sd 850 Version -
Qualcomm ≫ Sda660 Firmware Version -
   Qualcomm ≫ Sda660 Version -
Qualcomm ≫ Sdm660 Firmware Version -
   Qualcomm ≫ Sdm660 Version -
Qualcomm ≫ Sdx20 Firmware Version -
   Qualcomm ≫ Sdx20 Version -
Qualcomm ≫ Sdx24 Firmware Version -
   Qualcomm ≫ Sdx24 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.13% 0.03
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7 1 5.9
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 4.4 3.4 6.4
AV:L/AC:M/Au:N/C:P/I:P/A:P
CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

https://www.codeaurora.org/security-bulletin/2019/07/01/july-2019-code-aurora-security-bulletin
Patch
Third Party Advisory