2019 CVE Vulnerabilities
17,621 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-2324 | CRITICAL | 9.8 | 0.9% | Nov 6, 2019 | When ADSP is compromised, the audio port index that`s returned from ADSP might be out of the valid range and leads to ou... |
| CVE-2019-2323 | CRITICAL | 9.8 | 0.9% | Nov 6, 2019 | Lack of check to ensure crypto engine data passed by user is initialized can result in bus error in Snapdragon Auto, Sna... |
| CVE-2019-2302 | CRITICAL | 9.8 | 0.7% | Nov 6, 2019 | While processing vendor command which contains corrupted channel count, an integer overflow occurs and finally will lead... |
| CVE-2019-2285 | CRITICAL | 9.8 | 1.1% | Nov 6, 2019 | Out of bound write issue is observed while giving information about properties that have been set so far for playing vid... |
| CVE-2019-2283 | CRITICAL | 9.8 | 0.9% | Nov 6, 2019 | Improper validation of read and write index of tx and rx fifo`s before calculating pointer can lead to out-of-bound acce... |
| CVE-2019-2275 | MEDIUM | 5.5 | 0.2% | Nov 6, 2019 | While deserializing any key blob during key operations, buffer overflow could occur exposing partial key information if ... |
| CVE-2019-2258 | CRITICAL | 9.8 | 0.9% | Nov 6, 2019 | Improper validation of array index causes OOB write and then leads to memory corruption in MMCP in Snapdragon Auto, Snap... |
| CVE-2019-2249 | CRITICAL | 9.8 | 1.4% | Nov 6, 2019 | Kernel can do a memory read from arbitrary address passed by user during execution of a syscall in Snapdragon Auto, Snap... |
| CVE-2019-2246 | HIGH | 7.8 | 0.2% | Nov 6, 2019 | Thread start can cause invalid memory writes to arbitrary memory location since the argument is passed by user to kernel... |
| CVE-2019-10565 | CRITICAL | 9.8 | 0.7% | Nov 6, 2019 | Double free issue can happen when sensor power settings is freed by some thread while another thread try to access. in S... |
| CVE-2019-10542 | CRITICAL | 9.8 | 0.7% | Nov 6, 2019 | Buffer over-read may occur when downloading a corrupted firmware file that has chunk length in header which doesn`t matc... |
| CVE-2019-10541 | CRITICAL | 9.8 | 0.9% | Nov 6, 2019 | Dereference on uninitialized buffer can happen when parsing FLV clip with corrupted codec specific data in Snapdragon Au... |
| CVE-2019-10534 | CRITICAL | 9.8 | 1.1% | Nov 6, 2019 | Null-pointer dereference can occur while accessing the super index entry when it is not been allocated in Snapdragon Aut... |
| CVE-2019-10533 | CRITICAL | 9.8 | 0.9% | Nov 6, 2019 | Out of bound access due to improper validation of array index cause the index table entry to get corrupt in Snapdragon A... |
| CVE-2019-10531 | CRITICAL | 9.8 | 0.9% | Nov 6, 2019 | Incorrect reading of system image resulting in buffer overflow when size of system image is increased in Snapdragon Auto... |
| CVE-2019-10529 | HIGH | 8.1 | 1.7% | Nov 6, 2019 | Possible use after free issue due to race condition while attempting to mark the entry pages as dirty using function set... |
| CVE-2019-10528 | CRITICAL | 9.8 | 0.7% | Nov 6, 2019 | Use after free issue in kernel while accessing freed mdlog session info and its attributes after closing the session in ... |
| CVE-2019-10524 | HIGH | 7.8 | 0.2% | Nov 6, 2019 | Lack of check for a negative value returned for get_clk is wrongly interpreted as valid pointer and lead to use after fr... |
| CVE-2019-10522 | CRITICAL | 9.8 | 0.7% | Nov 6, 2019 | While playing the clip which is nonstandard buffer overflow can occur while parsing in Snapdragon Auto, Snapdragon Compu... |
| CVE-2019-10515 | MEDIUM | 5.5 | 0.2% | Nov 6, 2019 | DCI client which might be preemptively freed up might be accessed for transferring packets leading to kernel error in Sn... |
| CVE-2019-10512 | HIGH | 7.8 | 0.2% | Nov 6, 2019 | Payload size is not checked before using it as array index in audio in Snapdragon Auto, Snapdragon Compute, Snapdragon C... |
| CVE-2019-10505 | CRITICAL | 9.8 | 0.7% | Nov 6, 2019 | Out of bound access while processing a non-standard IE measurement request with length crossing past the size of frame i... |
| CVE-2019-10504 | MEDIUM | 6.5 | 0.5% | Nov 6, 2019 | Firmware not able to send EXT scan response to host within 1 sec due to resource consumption issue in Snapdragon Auto, S... |
| CVE-2019-10502 | HIGH | 7.8 | 0.2% | Nov 6, 2019 | Possible stack overflow when an index equal to io buffer size is accessed in camera module in Snapdragon Compute, Snapdr... |
| CVE-2019-10496 | HIGH | 7.8 | 0.2% | Nov 6, 2019 | Lack of checking a variable received from driver and populating in Firmware data structure leads to buffer overflow in S... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now