Published: 22/07/2019 Updated: 24/07/2019

CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 409

Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Null pointer dereference occurs for channel context while opening glink channel in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9607, MDM9640, MSM8909W, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SDM439, SDM630, SDM660, SDX24

Vulnerable Product	Search on Vulmon	Subscribe to Product
qualcomm mdm9607_firmware -
qualcomm mdm9640_firmware -
qualcomm msm8909w_firmware -
qualcomm qcs405_firmware -
qualcomm qcs605_firmware -
qualcomm sd_425_firmware -
qualcomm sd_427_firmware -
qualcomm sd_430_firmware -
qualcomm sd_435_firmware -
qualcomm sd_439_firmware -
qualcomm sd_429_firmware -
qualcomm sd_450_firmware -
qualcomm sd_625_firmware -
qualcomm sd_632_firmware -
qualcomm sd_636_firmware -
qualcomm sd_712_firmware -
qualcomm sd_710_firmware -
qualcomm sd_670_firmware -
qualcomm sd_820a_firmware -
qualcomm sd_835_firmware -
qualcomm sd_845_firmware -
qualcomm sd_850_firmware -
qualcomm sdm439_firmware -
qualcomm sdm630_firmware -
qualcomm sdm660_firmware -
qualcomm sdx24_firmware -

CWE-476 CWE-416 https://www.codeaurora.org/security-bulletin/2019/06/03/june-2019-code-aurora-security-bulletin https://nvd.nist.gov

CVE-2019-2264

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect