CVE Feed

    Dashboard / CVE / CVE-2019-2329

    CVE-2019-2329

    Use after free issue in cleanup routine due to missing pointer sanitization for a failed start of a trusted application. in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9205, QCS404, QCS605, SDA845, SDM670, SDM710, SDM845, SDX55, SM6150, SM7150, SM8150, SXR1130, SXR2130

    Published:Nov 21, 2019
    Last Modified:Nov 21, 2024
    EPS:Nov 21, 2019
    EPSS Score:0.0009
    CVSS Score:7.8

    Affected Products

    Vendor
    Qualcomm
    Product
    Mdm9205
    Vendor
    Qualcomm
    Product
    Mdm9205 Firmware
    Vendor
    Qualcomm
    Product
    Qcs404
    Vendor
    Qualcomm
    Product
    Qcs404 Firmware
    Vendor
    Qualcomm
    Product
    Qcs605
    Vendor
    Qualcomm
    Product
    Qcs605 Firmware
    Vendor
    Qualcomm
    Product
    Sda845
    Vendor
    Qualcomm
    Product
    Sda845 Firmware
    Vendor
    Qualcomm
    Product
    Sdm670
    Vendor
    Qualcomm
    Product
    Sdm670 Firmware
    Vendor
    Qualcomm
    Product
    Sdm710
    Vendor
    Qualcomm
    Product
    Sdm710 Firmware
    Vendor
    Qualcomm
    Product
    Sdm845
    Vendor
    Qualcomm
    Product
    Sdm845 Firmware
    Vendor
    Qualcomm
    Product
    Sdx55
    Vendor
    Qualcomm
    Product
    Sdx55 Firmware
    Vendor
    Qualcomm
    Product
    Sm6150
    Vendor
    Qualcomm
    Product
    Sm6150 Firmware
    Vendor
    Qualcomm
    Product
    Sm7150
    Vendor
    Qualcomm
    Product
    Sm7150 Firmware
    Vendor
    Qualcomm
    Product
    Sm8150
    Vendor
    Qualcomm
    Product
    Sm8150 Firmware
    Vendor
    Qualcomm
    Product
    Sxr1130
    Vendor
    Qualcomm
    Product
    Sxr1130 Firmware
    Vendor
    Qualcomm
    Product
    Sxr2130
    Vendor
    Qualcomm
    Product
    Sxr2130 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-416 Use After Free

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2023-21651 (CVSS 9.3) — Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.…
    CVE-2023-21626 (CVSS 7.1) — Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more tha…
    CVE-2023-21625 (CVSS 8.2) — Information disclosure in Network Services due to buffer over-read while the device receives DNS response.…
    CVE-2022-33295 (CVSS 8.2) — Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffe…
    CVE-2022-33294 (CVSS 7.5) — Transient DOS in Modem due to NULL pointer dereference while receiving response of lwm2m registration/update/b…
    CVE-2022-33259 (CVSS 9.8) — Memory corruption due to buffer copy without checking the size of input in modem while decoding raw SMS receiv…
    CVE-2022-33258 (CVSS 8.2) — Information disclosure due to buffer over-read in modem while reading configuration parameters.…
    CVE-2022-33231 (CVSS 9.3) — Memory corruption due to double free in core while initializing the encryption key.…
    CVE-2022-33228 (CVSS 8.2) — Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destin…
    CVE-2022-33223 (CVSS 7.5) — Transient DOS in Modem due to null pointer dereference while processing the incoming packet with http chunked …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High