CVE-2019-2301

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Possibility of out-of-bound read if id received from SPI is not in range of FIFO in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, MSM8909W, MSM8996AU, QCA9980, QCS605, Qualcomm 215, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 712 / SD 710 / SD 670, SD 820A, SD 845 / SD 850, SD 855, SDM439, SDM660, SDX24

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking	IPQ4019, IPQ8064, MSM8909W, MSM8996AU, QCA9980, QCS605, Qualcomm 215, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 712 / SD 710 / SD 670, SD 820A, SD 845 / SD 850, SD 855, SDM439, SDM660, SDX24

References

https://www.codeaurora.org/security-bulletin/2019/07/01/july-2019-code-aurora-security-bulletinPatch, Third Party Advisory
https://www.codeaurora.org/security-bulletin/2019/07/01/july-2019-code-aurora-security-bulletinPatch, Third Party Advisory

Timeline

Published: Jul 25, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-23029.8While processing vendor command which contains corrupted channel count, an integer overflow occurs and finally will lead to heap overflow. i CVE-2019-23039.8SNDCP module may access array out side its boundary when it receives malformed XID message. in Snapdragon Auto, Snapdragon Compute, Snapdrag CVE-2019-23047.8Integer overflow to buffer overflow due to lack of validation of event arguments received from firmware. in Snapdragon Auto, Snapdragon Cons CVE-2019-23059.8Out of bound access when reason code is extracted from frame data without validating the frame length in Snapdragon Auto, Snapdragon Consume CVE-2019-23067.8Improper casting of structure while handling the buffer leads to out of bound read in display in Snapdragon Auto, Snapdragon Connectivity, S CVE-2019-23079.8Possible integer underflow due to lack of validation before calculation of data length in 802.11 Rx management configuration in Snapdragon A CVE-2019-23087.8User application could potentially make RPC call to the fastrpc driver and the driver will allow the message to go through to the remote sub CVE-2019-23099.8While storing calibrated data from firmware in cache, An integer overflow may occur since data length received may exceed real data length. CVE-2019-23107.5Out of bound read would occur while trying to read action category and action ID without validating the action length of the Rx Frame body i CVE-2019-23119.8Possible buffer overflow in WLAN handler due to lack of validation of destination buffer size before copying it in Snapdragon Auto, Snapdrag CVE-2019-23127.8When handling the vendor command there exists a potential buffer overflow due to lack of input validation of data buffer received in Snapdra CVE-2019-23147.0Possible race condition that will cause a use-after-free when writing to two sysfs entries at nearly the same time in Snapdragon Compute, Sn