CVE-2019-2307: Integer Underflow
Possible integer underflow due to lack of validation before calculation of data length in 802.11 Rx management configuration in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCS405, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM630, SDM660, SDX20, SDX24
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-2307?
CVE-2019-2307 has been classified as a high severity vulnerability due to possible integer underflow in Qualcomm's 802.11 Rx management configuration.
How do I fix CVE-2019-2307?
To fix CVE-2019-2307, users should apply the firmware updates provided by Qualcomm or relevant manufacturers.
Which devices are affected by CVE-2019-2307?
CVE-2019-2307 affects various Qualcomm Snapdragon devices, including models from the MDM and QCA series.
What type of vulnerability is CVE-2019-2307?
CVE-2019-2307 is an integer underflow vulnerability that arises from inadequate validation before computing data length.
What potential impact does CVE-2019-2307 have on affected systems?
CVE-2019-2307 could allow an attacker to exploit the vulnerability and potentially execute arbitrary code on affected systems.