CVE-2019-2299: Buffer Overflow
An out-of-bound write can be triggered by a specially-crafted command supplied by a userspace application. in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, IPQ8074, MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA8081, QCA9377, QCA9379, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 625, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM660, SDX20, SDX24
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-2299?
The severity of CVE-2019-2299 is classified as high due to the potential for an out-of-bounds write that can be exploited.
How do I fix CVE-2019-2299?
To fix CVE-2019-2299, update the affected firmware to the latest version provided by Qualcomm.
What types of software are affected by CVE-2019-2299?
CVE-2019-2299 affects several Qualcomm firmware versions across Snapdragon Auto, Consumer Electronics, IoT, Mobile, and other platforms.
Can exploitation of CVE-2019-2299 lead to system compromise?
Yes, exploitation of CVE-2019-2299 can lead to system compromise due to the ability to execute arbitrary code.
What devices are vulnerable to CVE-2019-2299?
Devices running certain Qualcomm firmware versions for Snapdragon processors, including MDM and SD series, are vulnerable to CVE-2019-2299.