CVE-2019-2264

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Null pointer dereference occurs for channel context while opening glink channel in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9607, MDM9640, MSM8909W, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SDM439, SDM630, SDM660, SDX24

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416 CWE-476

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables	MDM9607, MDM9640, MSM8909W, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SDM439, SDM630, SDM660, SDX24

References

https://www.codeaurora.org/security-bulletin/2019/06/03/june-2019-code-aurora-security-bulletinPatch, Third Party Advisory
https://www.codeaurora.org/security-bulletin/2019/06/03/june-2019-code-aurora-security-bulletinPatch, Third Party Advisory

Timeline

Published: Jul 22, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-22667.8Possible double free issue in kernel while handling the camera sensor and its sub modules power sequence in Snapdragon Auto, Snapdragon Cons CVE-2019-22677.8Locked regions may be modified through other interfaces in secure boot loader image due to improper access control. in Snapdragon Auto, Snap CVE-2019-22689.8Possible OOB read issue in P2P action frames while handling WLAN management frame in Snapdragon Auto, Snapdragon Consumer Electronics Connec CVE-2019-22699.8Possible buffer overflow while processing the high level lim process action frame due to improper buffer length validation in Snapdragon Aut CVE-2019-22719.8Buffer over read can happen while parsing downlink session management OTA messages if network sends un-intended values in Snapdragon Auto, S CVE-2019-22727.8Buffer overflow can occur in display function due to lack of validation of header block size set by user. in Snapdragon Auto, Snapdragon Con CVE-2019-22737.5IOMMU page fault while playing h265 video file leads to denial of service issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv CVE-2019-22747.8Improper Access Control for RPU write access from secure processor in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics C CVE-2019-22755.5While deserializing any key blob during key operations, buffer overflow could occur exposing partial key information if any key operations a CVE-2019-22769.8Possible out of bound read occurs while processing beaconing request due to lack of check on action frames received from user controlled spa CVE-2019-22777.8Out of bound read can happen due to lack of NULL termination on user controlled data in WLAN in Snapdragon Auto, Snapdragon Compute, Snapdra CVE-2019-22787.8User keystore signature is ignored in boot and can lead to bypass boot image signature verification in Snapdragon Auto, Snapdragon Consumer