CVE-2019-2301

—

CVSS 3.0

7.8 high

EPSS

<1%p10

Published

Jul 25, 2019 (Jul 25, 2019)

Modified

Jun 17, 2026

Description

Possibility of out-of-bound read if id received from SPI is not in range of FIFO in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, MSM8909W, MSM8996AU, QCA9980, QCS605, Qualcomm 215, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 712 / SD 710 / SD 670, SD 820A, SD 845 / SD 850, SD 855, SDM439, SDM660, SDX24

Vendors: qualcomm
Products: ipq4019 firmware, ipq8064 firmware, msm8909w firmware, msm8996au firmware, qca9980 firmware, qcs605 firmware, qualcomm 215 firmware, sd 425 firmware, sd 439 firmware, sd 429 firmware, sd 450 firmware, sd 625 firmware
Weakness: CWE-125
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.