CVE-2019-2297

HIGH

7.8

Description

Buffer overflow can occur while processing non-standard NAN message from user space. in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, IPQ4019, IPQ8064, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCN7605, QCS405, QCS605, SDA660, SDA845, SDM636, SDM660, SDM845, SDX20, SDX24, SM8150

CVE Details

CVSS v3.1 Score7.8

SeverityHIGH

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredLOW

User InteractionNONE

Published11/21/2019

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

qualcomm:apq8009qualcomm:apq8009_firmwarequalcomm:apq8017qualcomm:apq8017_firmwarequalcomm:apq8053qualcomm:apq8053_firmwarequalcomm:apq8064qualcomm:apq8064_firmwarequalcomm:apq8096auqualcomm:apq8096au_firmwarequalcomm:ipq4019qualcomm:ipq4019_firmwarequalcomm:ipq8064qualcomm:ipq8064_firmwarequalcomm:ipq8074qualcomm:ipq8074_firmwarequalcomm:mdm9206qualcomm:mdm9206_firmwarequalcomm:mdm9207cqualcomm:mdm9207c_firmwarequalcomm:mdm9607qualcomm:mdm9607_firmwarequalcomm:mdm9640qualcomm:mdm9640_firmwarequalcomm:mdm9650qualcomm:mdm9650_firmwarequalcomm:msm8905qualcomm:msm8905_firmwarequalcomm:msm8996auqualcomm:msm8996au_firmwarequalcomm:qca6174aqualcomm:qca6174a_firmwarequalcomm:qca6574auqualcomm:qca6574au_firmwarequalcomm:qca9377qualcomm:qca9377_firmwarequalcomm:qca9379qualcomm:qca9379_firmwarequalcomm:qcn7605qualcomm:qcn7605_firmwarequalcomm:qcs405qualcomm:qcs405_firmwarequalcomm:qcs605qualcomm:qcs605_firmwarequalcomm:sda660qualcomm:sda660_firmwarequalcomm:sda845qualcomm:sda845_firmwarequalcomm:sdm636qualcomm:sdm636_firmwarequalcomm:sdm660qualcomm:sdm660_firmwarequalcomm:sdm845qualcomm:sdm845_firmwarequalcomm:sdx20qualcomm:sdx20_firmwarequalcomm:sdx24qualcomm:sdx24_firmwarequalcomm:sm8150qualcomm:sm8150_firmware

Weaknesses (CWE)

CWE-119CWE-190

References

https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin(product-security@qualcomm.com)

https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.