CVE-2019-2292

—

CVSS 3.0

7.8 high

EPSS

<1%p10

Published

Jul 22, 2019 (Jul 22, 2019)

Modified

Jun 17, 2026

Description

Out of bound access can occur due to buffer copy without checking size of input received from WLAN firmware in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9650, MSM8996AU, QCA6574AU, QCS405, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 665, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24

Vendors: qualcomm
Products: mdm9150 firmware, mdm9650 firmware, msm8996au firmware, qca6574au firmware, qcs405 firmware, qcs605 firmware, sd 210 firmware, sd 212 firmware, sd 205 firmware, sd 425 firmware, sd 427 firmware, sd 430 firmware
Weakness: CWE-787
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.