CVEvulnerability

CVE-2019-2264

7.8 HIGH Published 2019-07-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-07-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-416, CWE-476

Description

Null pointer dereference occurs for channel context while opening glink channel in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9607, MDM9640, MSM8909W, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SDM439, SDM630, SDM660, SDX24

Affected configurations

• qualcomm mdm9607 firmware • qualcomm mdm9640 firmware • qualcomm msm8909w firmware • qualcomm qcs405 firmware • qualcomm qcs605 firmware • qualcomm sd 425 firmware • qualcomm sd 427 firmware • qualcomm sd 430 firmware • qualcomm sd 435 firmware • qualcomm sd 439 firmware • qualcomm sd 429 firmware • qualcomm sd 450 firmware • qualcomm sd 625 firmware • qualcomm sd 632 firmware • qualcomm sd 636 firmware • qualcomm sd 712 firmware • qualcomm sd 710 firmware • qualcomm sd 670 firmware • qualcomm sd 820a firmware • qualcomm sd 835 firmware • qualcomm sd 845 firmware • qualcomm sd 850 firmware • qualcomm sdm439 firmware • qualcomm sdm630 firmware • qualcomm sdm660 firmware • qualcomm sdx24 firmware

Related

Weakness · CWE (2)

  • CWE-416 Use After Free weakness
  • CWE-476 NULL Pointer Dereference weakness

References