NetSight
high8.8

CVE-2019-2316

When computing the digest a local variable is used after going out of scope in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & …

Impact

When computing the digest a local variable is used after going out of scope in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9640, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 845 / SD 850, SD 855, SDM660, SDX24

Affected products

VendorProductAffected versions
QualcommMdm9640 Firmware
All versions
QualcommQcs405 Firmware
All versions
QualcommQcs605 Firmware
All versions
QualcommSd 425 Firmware
All versions
QualcommSd 427 Firmware
All versions
QualcommSd 430 Firmware
All versions
QualcommSd 435 Firmware
All versions
QualcommSd 450 Firmware
All versions
QualcommSd 625 Firmware
All versions
QualcommSd 636 Firmware
All versions
QualcommSd 665 Firmware
All versions
QualcommSd 675 Firmware
All versions

Weakness classification

References