CVEvulnerability

CVE-2019-2336

5.5 MEDIUM Published 2019-11-21 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2019-11-21
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected]): 4.9 MEDIUM — AV:L/AC:L/Au:N/C:N/I:N/A:C
Weaknesses: CWE-416, CWE-787

Description

Subsequent use of the CBO listener may result in further memory corruption due to use after free issue. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in MDM9205, QCS404, SDX55, SM6150, SM7150, SM8150, SXR2130

Affected configurations

• qualcomm mdm9205 firmware • qualcomm qcs404 firmware • qualcomm sdx55 firmware • qualcomm sm6150 firmware • qualcomm sm7150 firmware • qualcomm sm8150 firmware • qualcomm sxr2130 firmware

Weakness · CWE (2)

CWE-416 Use After Free weakness
CWE-787 Out-of-bounds Write weakness

References

https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin Vendor Advisory

CVE-2019-2336

Description

Affected configurations

Related

Weakness · CWE (2)

References