CVE-2019-2264: Use After Free
Null pointer dereference occurs for channel context while opening glink channel in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9607, MDM9640, MSM8909W, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SDM439, SDM630, SDM660, SDX24
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2019-2264?
CVE-2019-2264 is a vulnerability that causes a null pointer dereference in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in various Qualcomm chips.
What is the severity of CVE-2019-2264?
CVE-2019-2264 has a severity score of 7.8, which is classified as high.
Which software and devices are affected by CVE-2019-2264?
CVE-2019-2264 affects Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9607, MDM9640, MSM8909W, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 62...
How does CVE-2019-2264 occur?
CVE-2019-2264 occurs due to a null pointer dereference in the channel context when opening a glink channel.
Is there a fix for CVE-2019-2264?
For information about fixes for CVE-2019-2264, please refer to the reference link provided.