Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-2329

Use after free issue in cleanup routine due to missing pointer sanitization for a failed start of a trusted application. in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9205, QCS404, QCS605, SDA845, SDM670, SDM710, SDM845, SDX55, SM6150, SM7150, SM8150, SXR1130, SXR2130

Published

2019-11-21T15:15:16.307

Last Modified

2024-11-21T04:40:43.497

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

3.9

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-416
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System qualcomm mdm9205_firmware - Yes
Hardware qualcomm mdm9205 - No
Operating System qualcomm qcs404_firmware - Yes
Hardware qualcomm qcs404 - No
Operating System qualcomm qcs605_firmware - Yes
Hardware qualcomm qcs605 - No
Operating System qualcomm sda845_firmware - Yes
Hardware qualcomm sda845 - No
Operating System qualcomm sdm670_firmware - Yes
Hardware qualcomm sdm670 - No
Operating System qualcomm sdm710_firmware - Yes
Hardware qualcomm sdm710 - No
Operating System qualcomm sdm845_firmware - Yes
Hardware qualcomm sdm845 - No
Operating System qualcomm sdx55_firmware - Yes
Hardware qualcomm sdx55 - No
Operating System qualcomm sm6150_firmware - Yes
Hardware qualcomm sm6150 - No
Operating System qualcomm sm7150_firmware - Yes
Hardware qualcomm sm7150 - No
Operating System qualcomm sm8150_firmware - Yes
Hardware qualcomm sm8150 - No
Operating System qualcomm sxr1130_firmware - Yes
Hardware qualcomm sxr1130 - No
Operating System qualcomm sxr2130_firmware - Yes
Hardware qualcomm sxr2130 - No
References