1. Home
  2. CVE Database
  3. CVE-2019-2246
HIGH · 7.8

CVE-2019-2246

Thread start can cause invalid memory writes to arbitrary memory location since the argument is passed by user to kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Con...

Vulnerability Description

Thread start can cause invalid memory writes to arbitrary memory location since the argument is passed by user to kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9205, MDM9640, MSM8996AU, QCA6574, QCS605, Qualcomm 215, SD 425, SD 427, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX24, Snapdragon_High_Med_2016, SXR1130

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
QualcommMdm9205 Firmware-
QualcommMdm9205-
QualcommMdm9640 Firmware-
QualcommMdm9640-
QualcommMsm8996Au Firmware-
QualcommMsm8996Au-
QualcommQca6574 Firmware-
QualcommQca6574-
QualcommQcs605 Firmware-
QualcommQcs605-
QualcommQualcomm 215 Firmware-
QualcommQualcomm 215-
QualcommSd 425 Firmware-
QualcommSd 425-
QualcommSd 427 Firmware-
QualcommSd 427-
QualcommSd 435 Firmware-
QualcommSd 435-
QualcommSd 439 Firmware-
QualcommSd 439-

Related Weaknesses (CWE)

CWE-787

References

FAQ

What is CVE-2019-2246?

CVE-2019-2246 is a vulnerability with a CVSS score of 7.8 (HIGH). Thread start can cause invalid memory writes to arbitrary memory location since the argument is passed by user to kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Con...

How severe is CVE-2019-2246?

CVE-2019-2246 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-2246?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Mdm9205 Firmware, Qualcomm Mdm9205, Qualcomm Mdm9640 Firmware, Qualcomm Mdm9640, Qualcomm Msm8996Au Firmware.