CVE-2019-2304
Summary
| CVE | CVE-2019-2304 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-12-18 06:15:00 UTC |
| Updated | 2021-07-21 11:39:00 UTC |
| Description | Integer overflow to buffer overflow due to lack of validation of event arguments received from firmware. in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, IPQ8074, MDM9607, MSM8917, MSM8920, MSM8937, MSM8940, QCN7605, QCS405, QCS605, SDA845, SDM660, SDM845, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130 |
Risk And Classification
Problem Types: CWE-20 | CWE-787 | CWE-190
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Qualcomm | Ipq4019 | - | All | All | All |
| Hardware | Qualcomm | Ipq4019 | - | All | All | All |
| Operating System | Qualcomm | Ipq4019 Firmware | - | All | All | All |
| Operating System | Qualcomm | Ipq4019 Firmware | - | All | All | All |
| Hardware | Qualcomm | Ipq8064 | - | All | All | All |
| Hardware | Qualcomm | Ipq8064 | - | All | All | All |
| Operating System | Qualcomm | Ipq8064 Firmware | - | All | All | All |
| Operating System | Qualcomm | Ipq8064 Firmware | - | All | All | All |
| Hardware | Qualcomm | Ipq8074 | - | All | All | All |
| Hardware | Qualcomm | Ipq8074 | - | All | All | All |
| Operating System | Qualcomm | Ipq8074 Firmware | - | All | All | All |
| Operating System | Qualcomm | Ipq8074 Firmware | - | All | All | All |
| Hardware | Qualcomm | Mdm9607 | - | All | All | All |
| Hardware | Qualcomm | Mdm9607 | - | All | All | All |
| Operating System | Qualcomm | Mdm9607 Firmware | - | All | All | All |
| Operating System | Qualcomm | Mdm9607 Firmware | - | All | All | All |
| Hardware | Qualcomm | Msm8917 | - | All | All | All |
| Hardware | Qualcomm | Msm8917 | - | All | All | All |
| Operating System | Qualcomm | Msm8917 Firmware | - | All | All | All |
| Operating System | Qualcomm | Msm8917 Firmware | - | All | All | All |
| Hardware | Qualcomm | Msm8920 | - | All | All | All |
| Hardware | Qualcomm | Msm8920 | - | All | All | All |
| Operating System | Qualcomm | Msm8920 Firmware | - | All | All | All |
| Operating System | Qualcomm | Msm8920 Firmware | - | All | All | All |
| Hardware | Qualcomm | Msm8937 | - | All | All | All |
| Hardware | Qualcomm | Msm8937 | - | All | All | All |
| Operating System | Qualcomm | Msm8937 Firmware | - | All | All | All |
| Operating System | Qualcomm | Msm8937 Firmware | - | All | All | All |
| Hardware | Qualcomm | Msm8940 | - | All | All | All |
| Hardware | Qualcomm | Msm8940 | - | All | All | All |
| Operating System | Qualcomm | Msm8940 Firmware | - | All | All | All |
| Operating System | Qualcomm | Msm8940 Firmware | - | All | All | All |
| Hardware | Qualcomm | Qcn7605 | - | All | All | All |
| Hardware | Qualcomm | Qcn7605 | - | All | All | All |
| Operating System | Qualcomm | Qcn7605 Firmware | - | All | All | All |
| Operating System | Qualcomm | Qcn7605 Firmware | - | All | All | All |
| Hardware | Qualcomm | Qcs405 | - | All | All | All |
| Hardware | Qualcomm | Qcs405 | - | All | All | All |
| Operating System | Qualcomm | Qcs405 Firmware | - | All | All | All |
| Operating System | Qualcomm | Qcs405 Firmware | - | All | All | All |
| Hardware | Qualcomm | Qcs605 | - | All | All | All |
| Hardware | Qualcomm | Qcs605 | - | All | All | All |
| Operating System | Qualcomm | Qcs605 Firmware | - | All | All | All |
| Operating System | Qualcomm | Qcs605 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sda845 | - | All | All | All |
| Hardware | Qualcomm | Sda845 | - | All | All | All |
| Operating System | Qualcomm | Sda845 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sda845 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sdm660 | - | All | All | All |
| Hardware | Qualcomm | Sdm660 | - | All | All | All |
| Operating System | Qualcomm | Sdm660 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdm660 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sdm845 | - | All | All | All |
| Hardware | Qualcomm | Sdm845 | - | All | All | All |
| Operating System | Qualcomm | Sdm845 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdm845 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sdx24 | - | All | All | All |
| Hardware | Qualcomm | Sdx24 | - | All | All | All |
| Operating System | Qualcomm | Sdx24 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdx24 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sdx55 | - | All | All | All |
| Hardware | Qualcomm | Sdx55 | - | All | All | All |
| Operating System | Qualcomm | Sdx55 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdx55 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sm6150 | - | All | All | All |
| Hardware | Qualcomm | Sm6150 | - | All | All | All |
| Operating System | Qualcomm | Sm6150 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sm6150 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sm7150 | - | All | All | All |
| Hardware | Qualcomm | Sm7150 | - | All | All | All |
| Operating System | Qualcomm | Sm7150 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sm7150 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sm8150 | - | All | All | All |
| Hardware | Qualcomm | Sm8150 | - | All | All | All |
| Operating System | Qualcomm | Sm8150 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sm8150 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sxr1130 | - | All | All | All |
| Hardware | Qualcomm | Sxr1130 | - | All | All | All |
| Operating System | Qualcomm | Sxr1130 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sxr1130 Firmware | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| December 2019 Security Bulletin | Qualcomm | CONFIRM | www.qualcomm.com | Patch, Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.