CVE-2019-2277: High severity qualcomm msm8996au firmware vulnerability
Out of bound read can happen due to lack of NULL termination on user controlled data in WLAN in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MSM8996AU, QCS405, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX24
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2019-2277?
CVE-2019-2277 is a vulnerability that can cause an out-of-bounds read due to a lack of NULL termination on user-controlled data in WLAN in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MSM8996AU, QCS405, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD ...
How severe is CVE-2019-2277?
CVE-2019-2277 has a severity of 7.8 out of 10, which is considered high.
Which software is affected by CVE-2019-2277?
The affected software includes Google Android, Qualcomm Msm8996au, Qualcomm Qcs405 Firmware, Qualcomm Qcs605 Firmware, Qualcomm Sd 210 Firmware, Qualcomm Sd 212 Firmware, Qualcomm Sd 205 Firmware, Qualcomm Sd 425 Firmware, ...
How can I fix CVE-2019-2277?
To fix CVE-2019-2277, it is recommended to apply the patches and updates provided by the vendor or manufacturer of the affected software.
Where can I find more information about CVE-2019-2277?
More information about CVE-2019-2277 can be found on the Code Aurora Security Bulletin website at https://www.codeaurora.org/security-bulletin/2019/06/03/june-2019-code-aurora-security-bulletin.