CVE-2019-2271: Critical severity android vulnerability
Buffer over read can happen while parsing downlink session management OTA messages if network sends un-intended values in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8976, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SnapdragonHighMed2016, SXR1130, SXR2130
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-2271?
CVE-2019-2271 has been classified with a high severity level due to the potential for a buffer over-read vulnerability.
What causes CVE-2019-2271?
CVE-2019-2271 is caused by unintended values sent during the parsing of downlink session management OTA messages on supported Qualcomm Snapdragon devices.
How do I fix CVE-2019-2271?
To fix CVE-2019-2271, users should update their device firmware to the latest version provided by Qualcomm or device manufacturers.
Which devices are affected by CVE-2019-2271?
CVE-2019-2271 affects various Qualcomm Snapdragon-based devices including those in automotive, IoT, and mobile categories.
Can CVE-2019-2271 lead to data breaches?
Yes, if exploited, CVE-2019-2271 could potentially allow attackers to access sensitive information, leading to data breaches.