1. Home
  2. CVE Database
  3. CVE-2019-2302
CRITICAL · 9.8

CVE-2019-2302

While processing vendor command which contains corrupted channel count, an integer overflow occurs and finally will lead to heap overflow. in Snapdragon Auto, Snapdragon Consumer Electronics Connectiv...

Vulnerability Description

While processing vendor command which contains corrupted channel count, an integer overflow occurs and finally will lead to heap overflow. in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8017, APQ8053, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8976, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCN7605, QCS405, QCS605, SDA845, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SM6150, SM8150

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
QualcommApq8017 Firmware-
QualcommApq8017-
QualcommApq8053 Firmware-
QualcommApq8053-
QualcommApq8096Au Firmware-
QualcommApq8096Au-
QualcommMdm9206 Firmware-
QualcommMdm9206-
QualcommMdm9207C Firmware-
QualcommMdm9207C-
QualcommMdm9607 Firmware-
QualcommMdm9607-
QualcommMdm9640 Firmware-
QualcommMdm9640-
QualcommMdm9650 Firmware-
QualcommMdm9650-
QualcommMsm8905 Firmware-
QualcommMsm8905-
QualcommMsm8909 Firmware-
QualcommMsm8909-

Related Weaknesses (CWE)

CWE-190CWE-787

References

FAQ

What is CVE-2019-2302?

CVE-2019-2302 is a vulnerability with a CVSS score of 9.8 (CRITICAL). While processing vendor command which contains corrupted channel count, an integer overflow occurs and finally will lead to heap overflow. in Snapdragon Auto, Snapdragon Consumer Electronics Connectiv...

How severe is CVE-2019-2302?

CVE-2019-2302 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2019-2302?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Apq8017 Firmware, Qualcomm Apq8017, Qualcomm Apq8053 Firmware, Qualcomm Apq8053, Qualcomm Apq8096Au Firmware.