CVE-2019-2293: Use After Free
Pointer dereference while freeing IFE resources due to lack of length check of in port resource. in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 845 / SD 850, SD 855, SDM630, SDM660, SDX24
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID CVE-2019-2293?
The vulnerability ID CVE-2019-2293 refers to a pointer dereference vulnerability that occurs while freeing IFE resources due to the lack of a length check of in port resource.
Which devices are affected by CVE-2019-2293?
Devices including Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 63…
What is the severity of CVE-2019-2293?
The severity of CVE-2019-2293 is high with a severity value of 7.8.
How can I fix CVE-2019-2293?
To fix CVE-2019-2293, it is recommended to apply the necessary patches or updates provided by Qualcomm. It is also important to keep your device's software up to date.
Where can I find more information about CVE-2019-2293?
You can find more information about CVE-2019-2293 on the Code Aurora Security Bulletin for July 2019.