CVE-2019-2295: Buffer Overflow
Information disclosure due to lack of address range check done on the SysDBG buffers in SDI code. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, MDM9205, MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8998, Nicobar, QCS404, QCS405, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SnapdragonHighMed2016, SXR1130
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-2295?
CVE-2019-2295 has been rated as a high-severity vulnerability due to information disclosure risks.
How do I fix CVE-2019-2295?
To fix CVE-2019-2295, ensure that your affected Qualcomm device firmware is updated to the latest version provided by the vendor.
Which products are affected by CVE-2019-2295?
CVE-2019-2295 affects a range of Qualcomm firmware products including Snapdragon Mobile, Snapdragon Connectivity, and others.
What type of vulnerability is CVE-2019-2295?
CVE-2019-2295 is an information disclosure vulnerability due to insufficient address range checks.
When was CVE-2019-2295 disclosed?
CVE-2019-2295 was publicly disclosed in October 2019.