CVE-2019-2301: High severity qualcomm ipq4019 vulnerability
Possibility of out-of-bound read if id received from SPI is not in range of FIFO in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, MSM8909W, MSM8996AU, QCA9980, QCS605, Qualcomm 215, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 712 / SD 710 / SD 670, SD 820A, SD 845 / SD 850, SD 855, SDM439, SDM660, SDX24
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-2301?
The severity of CVE-2019-2301 is high with a severity value of 7.8.
Which software is affected by CVE-2019-2301?
CVE-2019-2301 affects Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, MSM8909W, MSM8996A.
How can I fix CVE-2019-2301?
To fix CVE-2019-2301, apply the necessary firmware updates provided by Qualcomm.
What is the Common Weakness Enumeration (CWE) ID of CVE-2019-2301?
The Common Weakness Enumeration (CWE) ID of CVE-2019-2301 is 125.
Where can I find more information about CVE-2019-2301?
More information about CVE-2019-2301 can be found at the Code Aurora Security Bulletin: https://www.codeaurora.org/security-bulletin/2019/07/01/july-2019-code-aurora-security-bulletin