CVE-2019-2287: Critical severity android vulnerability
Improper validation for inputs received from firmware can lead to an out of bound write issue in video driver. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6574AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-2287?
CVE-2019-2287 has been classified with a high severity level due to the potential for remote exploitation leading to out-of-bounds writes.
How do I fix CVE-2019-2287?
To fix CVE-2019-2287, it is recommended to update the affected Qualcomm firmware to the latest version provided by the vendor.
What devices are affected by CVE-2019-2287?
CVE-2019-2287 affects various Qualcomm Snapdragon devices including MDM9150, MDM9206, MDM9607, and others across multiple firmware versions.
Can CVE-2019-2287 be exploited remotely?
Yes, CVE-2019-2287 can potentially be exploited remotely due to improper validation of inputs, leading to out-of-bounds write issues.
What are the implications of CVE-2019-2287?
The implications of CVE-2019-2287 include the possibility of device crashes, data corruption, or unauthorized access to sensitive information.