CVE-2019-2314 | ByteOS Network

Vulnerability Details :

CVE-2019-2314

Assigner-qualcomm

Assigner Org ID-2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At-25 Jul, 2019 | 16:33

Updated At-04 Aug, 2024 | 18:49

Possible race condition that will cause a use-after-free when writing to two sysfs entries at nearly the same time in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W, QCS405, QCS605, Qualcomm 215, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 845 / SD 850, SD 855, SDM439, SDM660, SDX20, SDX24

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:qualcomm

Assigner Org ID:2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At:25 Jul, 2019 | 16:33

Updated At:04 Aug, 2024 | 18:49

▼CVE Numbering Authority (CNA)

Possible race condition that will cause a use-after-free when writing to two sysfs entries at nearly the same time in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W, QCS405, QCS605, Qualcomm 215, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 845 / SD 850, SD 855, SDM439, SDM660, SDX20, SDX24

Affected Products

Vendor

Qualcomm Technologies, Inc.

Product

Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Versions

Affected

MSM8909W, QCS405, QCS605, Qualcomm 215, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 845 / SD 850, SD 855, SDM439, SDM660, SDX20, SDX24

Problem Types

Type	CWE ID	Description
text	N/A	Use After Free Issue in Display

Type: text

CWE ID: N/A

Description: Use After Free Issue in Display

References

Hyperlink	Resource
https://www.codeaurora.org/security-bulletin/2019/07/01/july-2019-code-aurora-security-bulletin	x_refsource_CONFIRM

Hyperlink: https://www.codeaurora.org/security-bulletin/2019/07/01/july-2019-code-aurora-security-bulletin

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.codeaurora.org/security-bulletin/2019/07/01/july-2019-code-aurora-security-bulletin	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.codeaurora.org/security-bulletin/2019/07/01/july-2019-code-aurora-security-bulletin

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

Source:product-security@qualcomm.com

Published At:25 Jul, 2019 | 17:15

Updated At:21 Jul, 2021 | 11:39

Possible race condition that will cause a use-after-free when writing to two sysfs entries at nearly the same time in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W, QCS405, QCS605, Qualcomm 215, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 845 / SD 850, SD 855, SDM439, SDM660, SDX20, SDX24

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	7.0	HIGH	CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	4.4	MEDIUM	AV:L/AC:M/Au:N/C:P/I:P/A:P

Type: Primary

Version: 3.0

Base score: 7.0

Base severity: HIGH

Vector:

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 4.4

Base severity: MEDIUM

Vector:

AV:L/AC:M/Au:N/C:P/I:P/A:P

CPE Matches

Qualcomm Technologies, Inc.

>>msm8909w_firmware>>-

cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qcs405_firmware>>-

cpe:2.3:o:qualcomm:qcs405_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qcs405:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qcs605_firmware>>-

cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qcs605:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qualcomm_215_firmware>>-

cpe:2.3:o:qualcomm:qualcomm_215_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qualcomm_215>>-

cpe:2.3:h:qualcomm:qualcomm_215:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_425_firmware>>-

cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_439_firmware>>-

cpe:2.3:o:qualcomm:sd_439_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_439:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_429_firmware>>-

cpe:2.3:o:qualcomm:sd_429_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_429:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_450_firmware>>-

cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_625_firmware>>-

cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_632_firmware>>-

cpe:2.3:o:qualcomm:sd_632_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_632:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_636_firmware>>-

cpe:2.3:o:qualcomm:sd_636_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_636:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_665_firmware>>-

cpe:2.3:o:qualcomm:sd_665_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_665:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_675_firmware>>-

cpe:2.3:o:qualcomm:sd_675_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_675:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_712_firmware>>-

cpe:2.3:o:qualcomm:sd_712_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_712:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_710_firmware>>-

cpe:2.3:o:qualcomm:sd_710_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_710:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_670_firmware>>-

cpe:2.3:o:qualcomm:sd_670_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_670:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_730_firmware>>-

cpe:2.3:o:qualcomm:sd_730_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_730:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_845_firmware>>-

cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_850_firmware>>-

cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_850:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_855_firmware>>-

cpe:2.3:o:qualcomm:sd_855_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_855:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sdm439_firmware>>-

cpe:2.3:o:qualcomm:sdm439_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sdm439:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sdm660_firmware>>-

cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sdm660:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sdx20_firmware>>-

cpe:2.3:o:qualcomm:sdx20_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sdx20>>-

cpe:2.3:h:qualcomm:sdx20:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sdx24_firmware>>-

cpe:2.3:o:qualcomm:sdx24_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sdx24>>-

cpe:2.3:h:qualcomm:sdx24:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-362	Primary	nvd@nist.gov
CWE-416	Primary	nvd@nist.gov

CWE ID: CWE-362

Type: Primary

Source: nvd@nist.gov

CWE ID: CWE-416

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.codeaurora.org/security-bulletin/2019/07/01/july-2019-code-aurora-security-bulletin	product-security@qualcomm.com	Patch Third Party Advisory

Hyperlink: https://www.codeaurora.org/security-bulletin/2019/07/01/july-2019-code-aurora-security-bulletin

Source: product-security@qualcomm.com

Resource:

Patch

Third Party Advisory