PT-2019-16363
CVE-2019-2293
·
Published
2019-07-25
·
Updated
2019-07-29
Description by
CVSS 2.0
4.6
MediumMetricsAV:L/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Qualcomm Snapdragon versions (affected versions not specified)
Description
The issue is related to a pointer dereference while freeing IFE resources due to a lack of length check of in-port resource. This affects various Qualcomm Snapdragon products, including Consumer IOT, Industrial IOT, Mobile, Voice & Music, and Wearables, in specific chipsets such as MSM8909W, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 675, SD 712, SD 710, SD 670, SD 730, SD 845, SD 850, SD 855, SDM630, SDM660, and SDX24.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾