Not rated

CVE-2019-2307 Possible integer underflow due to lack of validation before calculation of data length in 802.11 Rx management…

Description

Possible integer underflow due to lack of validation before calculation of data length in 802.11 Rx management configuration in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCS405, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM630, SDM660, SDX20, SDX24

Affected products and versions

Product	Affected versions	Fixed in
Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music	Versions not published

References

www.codeaurora.org www.codeaurora.org
109383 www.securityfocus.com

Timeline

Published July 25, 2019
Last modified August 4, 2024

The 15 CVEs of Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music →

CVE-2019-10598 Out of bound access can occur while processing peer info in IBSS connection mode due to lack of upper bounds check to… Not rated CVE-2019-10557 Out-of-bound read in the wireless driver in the Linux kernel due to lack of check of buffer length Not rated CVE-2019-10537 Improper validation of event buffer extracted from FW response can lead to integer overflow, which will allow to pass… Not rated CVE-2018-11980 When a fake broadcast/multicast 11w rmf without mmie received, since no proper length check in wma_process_bip, buffer… Not rated

Track this CVE