CVE-2019-2250: Buffer Overflow
First published: Mon Apr 01 2019(Updated: )
Kernel can write to arbitrary memory address passed by user while freeing/stopping a thread in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCS605, SD 675, SD 712 / SD 710 / SD 670, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SM7150, SXR1130
Credit: product-security@qualcomm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Android | ||
| Qualcomm ZZ QCS605 firmware | ||
| Qualcomm QCS605 Firmware | ||
| Qualcomm SD 675 Firmware | ||
| Qualcomm Snapdragon 675 | ||
| Qualcomm Snapdragon 712 Firmware | ||
| Qualcomm Snapdragon 712 | ||
| qualcomm sdm710 firmware | ||
| Qualcomm Snapdragon 710 | ||
| Qualcomm SDM670 Firmware | ||
| Qualcomm SDM670 | ||
| Qualcomm SD835 Firmware | ||
| Qualcomm Snapdragon 835 | ||
| Qualcomm SDA845 Firmware | ||
| Qualcomm SD845 | ||
| Qualcomm SD850 Firmware | ||
| Qualcomm SD850 | ||
| Qualcomm SD855 Firmware | ||
| Qualcomm SD855 Firmware | ||
| Qualcomm SD 8cx firmware | ||
| Qualcomm Snapdragon 8cx | ||
| qualcomm SM7150 firmware | ||
| qualcomm SM7150 firmware | ||
| Qualcomm SXR1130 | ||
| Qualcomm SXR1130 Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2019-2250?
CVE-2019-2250 has a high severity rating due to the potential for arbitrary memory writes impacting system stability and security.
How do I fix CVE-2019-2250?
To fix CVE-2019-2250, apply the latest firmware updates from Qualcomm or your device manufacturer that address this vulnerability.
Which devices are affected by CVE-2019-2250?
CVE-2019-2250 affects various Qualcomm Snapdragon processors, including QCS605, SD 675, SD 712, SD 710, SD 670, SD 835, SD 845, SD 850, SD 855, SD 8CX, SM7150, and SXR1130.
What are the potential impacts of CVE-2019-2250?
The potential impacts of CVE-2019-2250 include denial of service and exploitation risks, as the kernel may be manipulated to write to unintended memory locations.
Is there a workaround for CVE-2019-2250?
There are currently no known workarounds for CVE-2019-2250, so applying the appropriate firmware patch is necessary to mitigate the vulnerability.
- agent/weakness
- agent/type
- agent/first-publish-date
- agent/author
- agent/severity
- agent/references
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/event
- agent/last-modified-date
- agent/source
- collector/android-source
- source/Android
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- vendor/google
- canonical/android
- vendor/qualcomm
- canonical/qualcomm zz qcs605 firmware
- canonical/qualcomm qcs605 firmware
- canonical/qualcomm sd 675 firmware
- canonical/qualcomm snapdragon 675
- canonical/qualcomm snapdragon 712 firmware
- canonical/qualcomm snapdragon 712
- canonical/qualcomm sdm710 firmware
- canonical/qualcomm snapdragon 710
- canonical/qualcomm sdm670 firmware
- canonical/qualcomm sdm670
- canonical/qualcomm sd835 firmware
- canonical/qualcomm snapdragon 835
- canonical/qualcomm sda845 firmware
- canonical/qualcomm sd845
- canonical/qualcomm sd850 firmware
- canonical/qualcomm sd850
- canonical/qualcomm sd855 firmware
- canonical/qualcomm sd 8cx firmware
- canonical/qualcomm snapdragon 8cx
- canonical/qualcomm sm7150 firmware
- canonical/qualcomm sxr1130
- canonical/qualcomm sxr1130 firmware