7.8

CVE-2019-2346

Firmware is getting into loop of overwriting memory when scan command is given from host because of improper validation. in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ8074, QCA8081, QCS404, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 820, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660

Data is provided by the National Vulnerability Database (NVD)
Qualcomm ≫ Ipq8074 Firmware Version-
   Qualcomm ≫ Ipq8074 Version-
Qualcomm ≫ Qca8081 Firmware Version-
   Qualcomm ≫ Qca8081 Version-
Qualcomm ≫ Qcs404 Firmware Version-
   Qualcomm ≫ Qcs404 Version-
Qualcomm ≫ Qcs405 Firmware Version-
   Qualcomm ≫ Qcs405 Version-
Qualcomm ≫ Qcs605 Firmware Version-
   Qualcomm ≫ Qcs605 Version-
Qualcomm ≫ Sd 425 Firmware Version-
   Qualcomm ≫ Sd 425 Version-
Qualcomm ≫ Sd 427 Firmware Version-
   Qualcomm ≫ Sd 427 Version-
Qualcomm ≫ Sd 430 Firmware Version-
   Qualcomm ≫ Sd 430 Version-
Qualcomm ≫ Sd 435 Firmware Version-
   Qualcomm ≫ Sd 435 Version-
Qualcomm ≫ Sd 450 Firmware Version-
   Qualcomm ≫ Sd 450 Version-
Qualcomm ≫ Sd 625 Firmware Version-
   Qualcomm ≫ Sd 625 Version-
Qualcomm ≫ Sd 636 Firmware Version-
   Qualcomm ≫ Sd 636 Version-
Qualcomm ≫ Sd 712 Firmware Version-
   Qualcomm ≫ Sd 712 Version-
Qualcomm ≫ Sd 710 Firmware Version-
   Qualcomm ≫ Sd 710 Version-
Qualcomm ≫ Sd 670 Firmware Version-
   Qualcomm ≫ Sd 670 Version-
Qualcomm ≫ Sd 820 Firmware Version-
   Qualcomm ≫ Sd 820 Version-
Qualcomm ≫ Sd 835 Firmware Version-
   Qualcomm ≫ Sd 835 Version-
Qualcomm ≫ Sd 845 Firmware Version-
   Qualcomm ≫ Sd 845 Version-
Qualcomm ≫ Sd 850 Firmware Version-
   Qualcomm ≫ Sd 850 Version-
Qualcomm ≫ Sd 855 Firmware Version-
   Qualcomm ≫ Sd 855 Version-
Qualcomm ≫ Sd 8cx Firmware Version-
   Qualcomm ≫ Sd 8cx Version-
Qualcomm ≫ Sda660 Firmware Version-
   Qualcomm ≫ Sda660 Version-
Qualcomm ≫ Sdm630 Firmware Version-
   Qualcomm ≫ Sdm630 Version-
Qualcomm ≫ Sdm660 Firmware Version-
   Qualcomm ≫ Sdm660 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.03% 0.06
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-129 Improper Validation of Array Index

The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.