2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-2343 | — | — | 0.2% | Jul 25, 2019 | Out of bound read and information disclosure in firmware due to insufficient checking of an embedded structure that can ... |
| CVE-2019-2334 | — | — | 0.8% | Jul 25, 2019 | Null pointer dereferencing can happen when playing the clip with wrong block group id in Snapdragon Auto, Snapdragon Com... |
| CVE-2019-2330 | — | — | 0.2% | Jul 25, 2019 | improper input validation in allocation request for secure allocations can lead to page fault. in Snapdragon Auto, Snapd... |
| CVE-2019-2328 | — | — | 0.2% | Jul 25, 2019 | Possible buffer overflow when number of channels passed is more than size of channel mapping array in Snapdragon Auto, S... |
| CVE-2019-2327 | — | — | 0.9% | Jul 25, 2019 | Possible buffer overflow can occur when playing clip with incorrect element size in Snapdragon Auto, Snapdragon Compute,... |
| CVE-2019-2326 | — | — | 0.2% | Jul 25, 2019 | Data token is received from ADSP and is used without validation as an index into the array leads to out of bound access ... |
| CVE-2019-2322 | — | — | 0.9% | Jul 25, 2019 | Buffer overflow can occur when playing specific clip which is non-standard in Snapdragon Auto, Snapdragon Compute, Snapd... |
| CVE-2019-2316 | — | — | 0.2% | Jul 25, 2019 | When computing the digest a local variable is used after going out of scope in Snapdragon Auto, Snapdragon Consumer IOT,... |
| CVE-2019-2314 | — | — | 0.1% | Jul 25, 2019 | Possible race condition that will cause a use-after-free when writing to two sysfs entries at nearly the same time in Sn... |
| CVE-2019-2312 | — | — | 0.2% | Jul 25, 2019 | When handling the vendor command there exists a potential buffer overflow due to lack of input validation of data buffer... |
| CVE-2019-2309 | — | — | 0.7% | Jul 25, 2019 | While storing calibrated data from firmware in cache, An integer overflow may occur since data length received may excee... |
| CVE-2019-2308 | — | — | 0.2% | Jul 25, 2019 | User application could potentially make RPC call to the fastrpc driver and the driver will allow the message to go throu... |
| CVE-2019-2307 | — | — | 1.6% | Jul 25, 2019 | Possible integer underflow due to lack of validation before calculation of data length in 802.11 Rx management configura... |
| CVE-2019-2306 | — | — | 0.2% | Jul 25, 2019 | Improper casting of structure while handling the buffer leads to out of bound read in display in Snapdragon Auto, Snapdr... |
| CVE-2019-2305 | — | — | 0.7% | Jul 25, 2019 | Out of bound access when reason code is extracted from frame data without validating the frame length in Snapdragon Auto... |
| CVE-2019-2301 | — | — | 0.2% | Jul 25, 2019 | Possibility of out-of-bound read if id received from SPI is not in range of FIFO in Snapdragon Auto, Snapdragon Compute,... |
| CVE-2019-2299 | — | — | 0.2% | Jul 25, 2019 | An out-of-bound write can be triggered by a specially-crafted command supplied by a userspace application. in Snapdragon... |
| CVE-2019-2298 | — | — | 0.2% | Jul 25, 2019 | Protection is missing while accessing md sessions info via macro which can lead to use-after-free in Snapdragon Auto, Sn... |
| CVE-2019-2293 | — | — | 0.2% | Jul 25, 2019 | Pointer dereference while freeing IFE resources due to lack of length check of in port resource. in Snapdragon Consumer ... |
| CVE-2019-2290 | — | — | 0.2% | Jul 25, 2019 | Multiple open and close from multiple threads will lead camera driver to access destroyed session data pointer in Snapdr... |
| CVE-2019-2281 | — | — | 0.2% | Jul 25, 2019 | An unauthenticated bitmap image can be loaded in to memory and subsequently cause execution of unverified code. in Snapd... |
| CVE-2019-2278 | — | — | 0.2% | Jul 25, 2019 | User keystore signature is ignored in boot and can lead to bypass boot image signature verification in Snapdragon Auto, ... |
| CVE-2019-2276 | — | — | 0.9% | Jul 25, 2019 | Possible out of bound read occurs while processing beaconing request due to lack of check on action frames received from... |
| CVE-2019-2273 | — | — | 0.7% | Jul 25, 2019 | IOMMU page fault while playing h265 video file leads to denial of service issue in Snapdragon Auto, Snapdragon Compute, ... |
| CVE-2019-2272 | — | — | 0.2% | Jul 25, 2019 | Buffer overflow can occur in display function due to lack of validation of header block size set by user. in Snapdragon ... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now