CVE-2019-2269

CRITICAL

Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapd...

Title source: llm

Description

Possible buffer overflow while processing the high level lim process action frame due to improper buffer length validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9650, MSM8996AU, QCS405, QCS605, SD 625, SD 636, SD 665, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24, SXR1130

References (1)

Core 1

Core References

Patch, Third Party Advisory x_refsource_confirm

https://www.codeaurora.org/security-bulletin/2019/06/03/june-2019-code-aurora-security-bulletin

Scores

CVSS v3 9.8

EPSS 0.0034

EPSS Percentile 57.0%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-119

Status published

Products (24)

qualcomm/mdm9150_firmware

qualcomm/mdm9650_firmware

qualcomm/msm8996au_firmware

qualcomm/qcs405_firmware

qualcomm/qcs605_firmware

qualcomm/sd_625_firmware

qualcomm/sd_636_firmware

qualcomm/sd_665_firmware

qualcomm/sd_670_firmware

qualcomm/sd_710_firmware

... and 14 more

Published Jul 22, 2019

Tracked Since Feb 18, 2026