NetSight
critical9.8

CVE-2019-2249

Kernel can do a memory read from arbitrary address passed by user during execution of a syscall in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT…

Impact

Kernel can do a memory read from arbitrary address passed by user during execution of a syscall in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ8074, MDM9205, MDM9650, QCA8081, QCS605, SD 427, SD 435, SD 450, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016, SXR1130

Affected products

VendorProductAffected versions
QualcommIpq8074 Firmware
All versions
QualcommMdm9205 Firmware
All versions
QualcommMdm9650 Firmware
All versions
QualcommQca8081 Firmware
All versions
QualcommQcs605 Firmware
All versions
QualcommSd 427 Firmware
All versions
QualcommSd 435 Firmware
All versions
QualcommSd 450 Firmware
All versions
QualcommSd 625 Firmware
All versions
QualcommSd 636 Firmware
All versions
QualcommSd 665 Firmware
All versions
QualcommSd 675 Firmware
All versions

Weakness classification

References