CVE-2019-2288
7.8 highEPSS 0.2%
Out of bound write in TZ while copying the secure dump structure on HLOS provided buffer as a part of memory dump in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, IPQ8074, MDM9150, MDM9206, MDM9607, MDM9650, MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8976, MSM8996, MSM8996AU, MSM8998, QCA8081, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, Snapdragon_High_Med_2016, SXR1130
Severity
CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 10% of CVEs (scores of 2026-10-31)
- CWE
- CWE-120
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:apq8009_firmware
- qualcomm:apq8017_firmware
- qualcomm:apq8053_firmware
- qualcomm:apq8096_firmware
- qualcomm:apq8096au_firmware
- qualcomm:apq8098_firmware
- qualcomm:ipq8074_firmware
- qualcomm:mdm9150_firmware
- qualcomm:mdm9206_firmware
- qualcomm:mdm9607_firmware
- qualcomm:mdm9650_firmware
- qualcomm:msm8905_firmware
- qualcomm:msm8909_firmware
- qualcomm:msm8917_firmware
- qualcomm:msm8920_firmware
- qualcomm:msm8937_firmware
- qualcomm:msm8940_firmware
- qualcomm:msm8953_firmware
- qualcomm:msm8976_firmware
- qualcomm:msm8996_firmware
- qualcomm:msm8996au_firmware
- qualcomm:msm8998_firmware
- qualcomm:qca8081_firmware
- qualcomm:qcs605_firmware
- qualcomm:qm215_firmware
- qualcomm:sda660_firmware
- qualcomm:sda845_firmware
- qualcomm:sdm429_firmware
- qualcomm:sdm439_firmware
- qualcomm:sdm450_firmware
- qualcomm:sdm630_firmware
- qualcomm:sdm632_firmware
- qualcomm:sdm636_firmware
- qualcomm:sdm660_firmware
- qualcomm:sdm670_firmware
- qualcomm:sdm710_firmware
- qualcomm:sdm845_firmware
- qualcomm:sdm850_firmware
- qualcomm:snapdragon_high_med_2016_firmware
- qualcomm:sxr1130_firmware
References
Check your stackJSON