CVE-2019-2250

CVE-2019-2250: vulnerability in Qualcomm, Inc. Snapdragon Compute, Snapdragon…

Published · Updated

Follow this CVE+ Monitor Snapdragon Mobile+ Monitor Snapdragon Industrial IOT

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.2%
Kernel can write to arbitrary memory address passed by user while freeing/stopping a thread in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCS605, SD 675, SD 712 / SD 710 / SD 670, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SM7150, SXR1130
Affected products
Qualcomm, Inc. · Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
Related CVEs — Qualcomm, Inc. Snapdragon Compute, Snapdragon…

In the same product, most dangerous first.

CVE-2020-3617—CVE-2020-3617EPSS 0.2%CVE-2020-11133—CVE-2020-11133EPSS 0.2%CVE-2019-10575—CVE-2019-10575EPSS 0.2%CVE-2021-30309HIGHCVE-2021-30309EPSS 0.1%