CVE-2019-2307

Possible integer underflow due to lack of validation before calculation of data length in 802.11 Rx management configuration in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCS405, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM630, SDM660, SDX20, SDX24

• CWE-125
• CWE-191

• http://www.securityfocus.com/bid/109383Third Party Advisory, VDB Entry
• https://www.codeaurora.org/security-bulletin/2019/07/01/july-2019-code-aurora-security-bulletinPatch, Third Party Advisory
• http://www.securityfocus.com/bid/109383Third Party Advisory, VDB Entry
• https://www.codeaurora.org/security-bulletin/2019/07/01/july-2019-code-aurora-security-bulletinPatch, Third Party Advisory

Published

Jul 25, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-2301Possibility of out-of-bound read if id received from SPI is …
• CVE-2019-2302While processing vendor command which contains corrupted cha…9.8
• CVE-2019-2303SNDCP module may access array out side its boundary when it …9.8
• CVE-2019-2304Integer overflow to buffer overflow due to lack of validatio…7.8
• CVE-2019-2305Out of bound access when reason code is extracted from frame…
• CVE-2019-2306Improper casting of structure while handling the buffer lead…
• CVE-2019-2308User application could potentially make RPC call to the fast…
• CVE-2019-2309While storing calibrated data from firmware in cache, An int…
• CVE-2019-2310Out of bound read would occur while trying to read action ca…7.5
• CVE-2019-2311Possible buffer overflow in WLAN handler due to lack of vali…9.8
• CVE-2019-2312When handling the vendor command there exists a potential bu…
• CVE-2019-2314Possible race condition that will cause a use-after-free whe…