CVE-2019-2316

—

CVSS 3.0

8.8 high

EPSS

<1%p11

Published

Jul 25, 2019 (Jul 25, 2019)

Modified

Jun 17, 2026

Description

When computing the digest a local variable is used after going out of scope in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9640, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 845 / SD 850, SD 855, SDM660, SDX24

Vendors: qualcomm
Products: mdm9640 firmware, qcs405 firmware, qcs605 firmware, sd 425 firmware, sd 427 firmware, sd 430 firmware, sd 435 firmware, sd 450 firmware, sd 625 firmware, sd 636 firmware, sd 665 firmware, sd 675 firmware
Weakness: CWE-416
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.