CVE-2019-2305: Critical severity Google Android vulnerability
Out of bound access when reason code is extracted from frame data without validating the frame length in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-2305?
CVE-2019-2305 has been rated as high severity due to the potential for exploitation that leads to unauthorized access.
How do I fix CVE-2019-2305?
To fix CVE-2019-2305, update to the latest firmware release provided by Qualcomm that addresses this vulnerability.
What systems are affected by CVE-2019-2305?
CVE-2019-2305 affects various Snapdragon devices, including models MDM9150, MDM9206, MDM9607, and others.
What kind of vulnerability is CVE-2019-2305?
CVE-2019-2305 is classified as an out-of-bounds access vulnerability that can be exploited when frame data is improperly handled.
Is there a workaround for CVE-2019-2305?
There are no recommended workarounds for CVE-2019-2305; applying the necessary updates is the best approach.