CVEvulnerability

CVE-2019-2250

7.8 HIGH Published 2019-05-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-05-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119, CWE-20

Description

Kernel can write to arbitrary memory address passed by user while freeing/stopping a thread in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCS605, SD 675, SD 712 / SD 710 / SD 670, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SM7150, SXR1130

Affected configurations

• qualcomm qcs605 firmware • qualcomm sd 675 firmware • qualcomm sd 712 firmware • qualcomm sd 710 firmware • qualcomm sd 670 firmware • qualcomm sd 835 firmware • qualcomm sd 845 firmware • qualcomm sd 850 firmware • qualcomm sd 855 firmware • qualcomm sd 8cx firmware • qualcomm sm7150 firmware • qualcomm sxr1130 firmware

Related

Weakness · CWE (2)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
  • CWE-20 Improper Input Validation weakness

References