CVE-2019-2246: Input Validation
Thread start can cause invalid memory writes to arbitrary memory location since the argument is passed by user to kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9205, MDM9640, MSM8996AU, QCA6574, QCS605, Qualcomm 215, SD 425, SD 427, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX24, SnapdragonHighMed2016, SXR1130
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-2246?
CVE-2019-2246 is a vulnerability that allows for invalid memory writes to arbitrary memory locations in Qualcomm Snapdragon devices running Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, and Snapdragon Mobile.
How does CVE-2019-2246 impact Google Android?
CVE-2019-2246 affects Google Android devices running Qualcomm Snapdragon processors, allowing for invalid memory writes to arbitrary memory locations.
What is the severity of CVE-2019-2246?
CVE-2019-2246 has a severity rating of high (7/10).
Are there any known fixes for CVE-2019-2246?
Google has released security patches for CVE-2019-2246, and affected users are advised to update their devices with the latest patches provided by their device manufacturer.
Where can I find more information about CVE-2019-2246?
More information about CVE-2019-2246 can be found in the Android Security Bulletin for September 2019.