CVE-2019-2295
—CVSS 3.1
5.5 medium
EPSS
<1%p9
Published
()
Modified
Description
Information disclosure due to lack of address range check done on the SysDBG buffers in SDI code. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, MDM9205, MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8998, Nicobar, QCS404, QCS405, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, Snapdragon_High_Med_2016, SXR1130
- Vendors
- qualcomm
- Products
- apq8009 firmware, apq8017 firmware, apq8053 firmware, mdm9205 firmware, msm8905 firmware, msm8909 firmware, msm8917 firmware, msm8920 firmware, msm8937 firmware, msm8940 firmware, msm8953 firmware, msm8998 firmware
- Weakness
- CWE-119
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
In the news0 stories
No ingested article mentions this CVE yet.