CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2019-2252
Critical (9.8) in qualcomm. EPSS 1.2% chance of exploitation in the next 30 days.
Classic buffer overflow vulnerability while playing the specific video whose Decode picture buffer size is more than 16 in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130
Severity
- EPSS
- 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
- CWE
- CWE-120
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:mdm9650_firmware
- qualcomm:msm8909w_firmware
- qualcomm:msm8996au_firmware
- qualcomm:qcs605_firmware
- qualcomm:qualcomm_215_firmware
- qualcomm:sd_205_firmware
- qualcomm:sd_210_firmware
- qualcomm:sd_212_firmware
- qualcomm:sd_425_firmware
- qualcomm:sd_427_firmware
- qualcomm:sd_429_firmware
- qualcomm:sd_430_firmware
- qualcomm:sd_435_firmware
- qualcomm:sd_439_firmware
- qualcomm:sd_450_firmware
- qualcomm:sd_625_firmware
- qualcomm:sd_632_firmware
- qualcomm:sd_636_firmware
- qualcomm:sd_665_firmware
- qualcomm:sd_670_firmware
- qualcomm:sd_675_firmware
- qualcomm:sd_710_firmware
- qualcomm:sd_712_firmware
- qualcomm:sd_820_firmware
- qualcomm:sd_820a_firmware
- qualcomm:sd_835_firmware
- qualcomm:sd_845_firmware
- qualcomm:sd_850_firmware
- qualcomm:sd_855_firmware
- qualcomm:sd_8cx_firmware
- qualcomm:sda660_firmware
- qualcomm:sdm439_firmware
- qualcomm:sdm630_firmware
- qualcomm:sdm660_firmware
- qualcomm:snapdragon_high_med_2016_firmware
- qualcomm:sxr1130_firmware