Out-of-bounds read in Qualcomm products - CVE-2019-2277

Vulnerability identifier: #VU19362

CSH Severity: High

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-2277

CWE-ID: CWE-125

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local attacker to gain access to potentially sensitive information.

The vulnerability exists due to lack of NULL termination on user controlled data in WLAN. A local authenticated attacker can trigger out-of-bounds read error and disclose information, disrupt service and modificate the target applications.

The vulnerability exists in: Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

SD665
MSM8996AU
QCS405
QCS605
SD210
SD212
SD205
SD425
SD427
SD430
SD435
SD450
SD625
SD636
SDX24
SD675
SD670
SD712
SD710
SD730
SD820A
SD835
SD845
SD850
SD855
SDA660
SDM630
SDM660

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

• https://www.codeaurora.org/security-bulletin/2019/06/03/june-2019-code-aurora-security-bulletin
• https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=477...

• Out-of-bounds read in Qualcomm SDX24