CVE-2019-2258: Out-of-bounds Read
Improper validation of array index causes OOB write and then leads to memory corruption in MMCP in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX20, SnapdragonHighMed2016, SXR1130
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-2258?
CVE-2019-2258 is rated as a high severity vulnerability due to its potential for memory corruption.
How do I fix CVE-2019-2258?
To mitigate CVE-2019-2258, update your Qualcomm firmware or affected Android devices to the latest security patches.
Which devices are impacted by CVE-2019-2258?
CVE-2019-2258 affects various Qualcomm Snapdragon devices across multiple categories including Auto, Mobile, and Compute.
What causes the CVE-2019-2258 vulnerability?
CVE-2019-2258 is caused by improper validation of array indices leading to out-of-bounds writes.
Is CVE-2019-2258 being actively exploited?
As of the latest reports, there is no specific indication that CVE-2019-2258 is being actively exploited in the wild.