ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2019-2250

—
CVSS 3.0
7.8 high
EPSS
<1%p11
Published
()
Modified
Description

Kernel can write to arbitrary memory address passed by user while freeing/stopping a thread in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCS605, SD 675, SD 712 / SD 710 / SD 670, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SM7150, SXR1130

Vendors
qualcomm
Products
qcs605 firmware, sd 675 firmware, sd 712 firmware, sd 710 firmware, sd 670 firmware, sd 835 firmware, sd 845 firmware, sd 850 firmware, sd 855 firmware, sd 8cx firmware, sm7150 firmware, sxr1130 firmware
Weakness
CWE-20, CWE-119
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news

No ingested article mentions this CVE yet.