NetSight
high7.8

CVE-2019-2346

Firmware is getting into loop of overwriting memory when scan command is given from host because of improper validation.

Impact

Firmware is getting into loop of overwriting memory when scan command is given from host because of improper validation. in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ8074, QCA8081, QCS404, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 820, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660

Affected products

VendorProductAffected versions
QualcommIpq8074 Firmware
All versions
QualcommQca8081 Firmware
All versions
QualcommQcs404 Firmware
All versions
QualcommQcs405 Firmware
All versions
QualcommQcs605 Firmware
All versions
QualcommSd 425 Firmware
All versions
QualcommSd 427 Firmware
All versions
QualcommSd 430 Firmware
All versions
QualcommSd 435 Firmware
All versions
QualcommSd 450 Firmware
All versions
QualcommSd 625 Firmware
All versions
QualcommSd 636 Firmware
All versions

Weakness classification

References