CVE-2019-2298

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Protection is missing while accessing md sessions info via macro which can lead to use-after-free in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, QCS405, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 845 / SD 850, SD 855, SDM660, SDX20, SDX24

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published: Jul 25, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-22997.8An out-of-bound write can be triggered by a specially-crafted command supplied by a userspace application. in Snapdragon Auto, Snapdragon Co CVE-2019-23009.8Possible buffer overflow in WLAN handler due to lack of validation of destination buffer size before copying into it in Snapdragon Auto, Sna CVE-2019-23017.8Possibility of out-of-bound read if id received from SPI is not in range of FIFO in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer CVE-2019-23029.8While processing vendor command which contains corrupted channel count, an integer overflow occurs and finally will lead to heap overflow. i CVE-2019-23039.8SNDCP module may access array out side its boundary when it receives malformed XID message. in Snapdragon Auto, Snapdragon Compute, Snapdrag CVE-2019-23047.8Integer overflow to buffer overflow due to lack of validation of event arguments received from firmware. in Snapdragon Auto, Snapdragon Cons CVE-2019-23059.8Out of bound access when reason code is extracted from frame data without validating the frame length in Snapdragon Auto, Snapdragon Consume CVE-2019-23067.8Improper casting of structure while handling the buffer leads to out of bound read in display in Snapdragon Auto, Snapdragon Connectivity, S CVE-2019-23079.8Possible integer underflow due to lack of validation before calculation of data length in 802.11 Rx management configuration in Snapdragon A CVE-2019-23087.8User application could potentially make RPC call to the fastrpc driver and the driver will allow the message to go through to the remote sub CVE-2019-23099.8While storing calibrated data from firmware in cache, An integer overflow may occur since data length received may exceed real data length. CVE-2019-23107.5Out of bound read would occur while trying to read action category and action ID without validating the action length of the Rx Frame body i