CVE-2019-2274: High severity Google Android vulnerability
Improper Access Control for RPU write access from secure processor in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8017, APQ8053, APQ8098, IPQ8074, MDM9150, MDM9650, MDM9655, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8998, Nicobar, QCA8081, QCN7605, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX55, SM6150, SM7150, SM8150, SXR1130
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-2274?
The severity of CVE-2019-2274 is classified as high due to improper access control that may allow unauthorized writing access to secure processors.
How do I fix CVE-2019-2274?
To fix CVE-2019-2274, apply the latest security patches provided by your device manufacturer that address this vulnerability.
Which devices are affected by CVE-2019-2274?
CVE-2019-2274 affects various Qualcomm Snapdragon products including Android devices, automotive and industrial IoT devices, among others.
What kind of attacks can exploit CVE-2019-2274?
Exploitation of CVE-2019-2274 could lead to unauthorized access, allowing attackers to manipulate secure data on affected devices.
Is CVE-2019-2274 being actively exploited?
As of now, there have been no confirmed reports of active exploitation of CVE-2019-2274 in the wild.