NetSight
high7.8

CVE-2019-2290

Multiple open and close from multiple threads will lead camera driver to access destroyed session data pointer in Snapdragon Auto, Snapdragon Connectivity, Sna…

Impact

Multiple open and close from multiple threads will lead camera driver to access destroyed session data pointer in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDM660, SDX20, SDX24, Snapdragon_High_Med_2016

Affected products

VendorProductAffected versions
QualcommMdm9206 Firmware
All versions
QualcommMdm9607 Firmware
All versions
QualcommMdm9640 Firmware
All versions
QualcommMdm9650 Firmware
All versions
QualcommMsm8909w Firmware
All versions
QualcommMsm8996au Firmware
All versions
QualcommQcs605 Firmware
All versions
QualcommSd 425 Firmware
All versions
QualcommSd 427 Firmware
All versions
QualcommSd 430 Firmware
All versions
QualcommSd 435 Firmware
All versions
QualcommSd 450 Firmware
All versions

Weakness classification

References