NetSight
medium5.5

CVE-2019-2237

Failure in taking appropriate action to handle the error case If keypad gpio deactivation fails leads to silent failure scenario and subsequent logic gets exec…

Impact

Failure in taking appropriate action to handle the error case If keypad gpio deactivation fails leads to silent failure scenario and subsequent logic gets executed everytime in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 8CX, SXR1130

Affected products

VendorProductAffected versions
QualcommMdm9206 Firmware
All versions
QualcommMdm9607 Firmware
All versions
QualcommMdm9650 Firmware
All versions
QualcommMdm9655 Firmware
All versions
QualcommQcs605 Firmware
All versions
QualcommSd 210 Firmware
All versions
QualcommSd 212 Firmware
All versions
QualcommSd 205 Firmware
All versions
QualcommSd 410 Firmware
All versions
QualcommSd 412 Firmware
All versions
QualcommSd 675 Firmware
All versions
QualcommSd 712 Firmware
All versions

Weakness classification

References