CVE-2019-2323: Input Validation
Lack of check to ensure crypto engine data passed by user is initialized can result in bus error in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2019-2323?
The severity of CVE-2019-2323 is categorized as moderate.
How do I fix CVE-2019-2323?
To fix CVE-2019-2323, update to the latest firmware version from Qualcomm that addresses this vulnerability.
Which products are affected by CVE-2019-2323?
CVE-2019-2323 affects various Qualcomm products including Snapdragon Mobile, Snapdragon Auto, and others.
What types of issues does CVE-2019-2323 cause?
CVE-2019-2323 can cause a bus error due to uninitialized data being passed to the crypto engine.
Is CVE-2019-2323 exploited in the wild?
As of now, there is no indication that CVE-2019-2323 is being actively exploited in the wild.