NetSight
high7.8

CVE-2019-2339

Out of bound access due to lack of check of whiltelist array size while reading the image elf segments.

Impact

Out of bound access due to lack of check of whiltelist array size while reading the image elf segments. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9205, QCS404, QCS605, SDA845, SDM670, SDM710, SDM845, SDM850, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130, SXR2130

Affected products

VendorProductAffected versions
QualcommMdm9205 Firmware
All versions
QualcommQcs404 Firmware
All versions
QualcommQcs605 Firmware
All versions
QualcommSda845 Firmware
All versions
QualcommSdm670 Firmware
All versions
QualcommSdm710 Firmware
All versions
QualcommSdm845 Firmware
All versions
QualcommSdm850 Firmware
All versions
QualcommSdx24 Firmware
All versions
QualcommSdx55 Firmware
All versions
QualcommSm6150 Firmware
All versions
QualcommSm7150 Firmware
All versions

Weakness classification

References