NetSight
high7.0

CVE-2019-2284

Possible use-after-free issue due to a race condition while calling camera ioctl concurrently in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Indust…

Impact

Possible use-after-free issue due to a race condition while calling camera ioctl concurrently in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W, QCS405, QCS605, Qualcomm 215, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 845 / SD 850, SD 855, SDM439, SDX24

Affected products

VendorProductAffected versions
QualcommMsm8909w Firmware
All versions
QualcommQcs405 Firmware
All versions
QualcommQcs605 Firmware
All versions
QualcommQualcomm 215 Firmware
All versions
QualcommSd 425 Firmware
All versions
QualcommSd 439 Firmware
All versions
QualcommSd 429 Firmware
All versions
QualcommSd 450 Firmware
All versions
QualcommSd 625 Firmware
All versions
QualcommSd 632 Firmware
All versions
QualcommSd 665 Firmware
All versions
QualcommSd 675 Firmware
All versions

Weakness classification

References