CVE-2019-2325: Out-of-bounds Read
Out of boundary access due to token received from ADSP and is used without validation as an index into the array in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2019-2325?
CVE-2019-2325 has a severity rating that indicates potential exploitation could lead to serious security breaches in affected devices.
How do I fix CVE-2019-2325?
To fix CVE-2019-2325, ensure that your device firmware is updated to the latest version provided by the manufacturer.
Which devices are affected by CVE-2019-2325?
CVE-2019-2325 affects a range of Qualcomm chipsets including MDM9150, MDM9206, MDM9607, and several other Snapdragon platforms.
What is the nature of the vulnerability in CVE-2019-2325?
CVE-2019-2325 is caused by out-of-bounds access due to unvalidated tokens used as indices in an array.
Can CVE-2019-2325 be exploited remotely?
Yes, exploitation of CVE-2019-2325 could potentially allow attackers to execute unauthorized commands or access sensitive data remotely.