CVE-2019-2237

Severity Score

5.5

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Failure in taking appropriate action to handle the error case If keypad gpio deactivation fails leads to silent failure scenario and subsequent logic gets executed everytime in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 8CX, SXR1130

Un fallo en tomar la acción adecuada para manejar el caso de error si un fallo en la desactivación gpio del teclado, conlleva a un escenario de fallo silencioso y a una lógica subsiguiente que es ejecutada siempre en los productos Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile en las versiones MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 8CX, SXR1130.

*Credits: N/A

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Attack Vector

Local

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

Partial

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2018-12-10 CVE Reserved
2019-07-25 CVE Published
2023-03-08 EPSS Updated
2024-08-04 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-388: 7PK - Errors

CAPEC

References (1)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://www.qualcomm.com/company/product-security/bulletins	2019-07-26

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Qualcomm Search vendor "Qualcomm"	Mdm9206 Firmware Search vendor "Qualcomm" for product "Mdm9206 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Mdm9206 Search vendor "Qualcomm" for product "Mdm9206"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Mdm9607 Firmware Search vendor "Qualcomm" for product "Mdm9607 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Mdm9607 Search vendor "Qualcomm" for product "Mdm9607"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Mdm9650 Firmware Search vendor "Qualcomm" for product "Mdm9650 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Mdm9650 Search vendor "Qualcomm" for product "Mdm9650"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Mdm9655 Firmware Search vendor "Qualcomm" for product "Mdm9655 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Mdm9655 Search vendor "Qualcomm" for product "Mdm9655"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Qcs605 Firmware Search vendor "Qualcomm" for product "Qcs605 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Qcs605 Search vendor "Qualcomm" for product "Qcs605"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sd 210 Firmware Search vendor "Qualcomm" for product "Sd 210 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sd 210 Search vendor "Qualcomm" for product "Sd 210"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sd 212 Firmware Search vendor "Qualcomm" for product "Sd 212 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sd 212 Search vendor "Qualcomm" for product "Sd 212"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sd 205 Firmware Search vendor "Qualcomm" for product "Sd 205 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sd 205 Search vendor "Qualcomm" for product "Sd 205"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sd 410 Firmware Search vendor "Qualcomm" for product "Sd 410 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sd 410 Search vendor "Qualcomm" for product "Sd 410"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sd 412 Firmware Search vendor "Qualcomm" for product "Sd 412 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sd 412 Search vendor "Qualcomm" for product "Sd 412"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sd 675 Firmware Search vendor "Qualcomm" for product "Sd 675 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sd 675 Search vendor "Qualcomm" for product "Sd 675"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sd 712 Firmware Search vendor "Qualcomm" for product "Sd 712 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sd 712 Search vendor "Qualcomm" for product "Sd 712"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sd 710 Firmware Search vendor "Qualcomm" for product "Sd 710 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sd 710 Search vendor "Qualcomm" for product "Sd 710"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sd 670 Firmware Search vendor "Qualcomm" for product "Sd 670 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sd 670 Search vendor "Qualcomm" for product "Sd 670"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sd 730 Firmware Search vendor "Qualcomm" for product "Sd 730 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sd 730 Search vendor "Qualcomm" for product "Sd 730"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sd 8cx Firmware Search vendor "Qualcomm" for product "Sd 8cx Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sd 8cx Search vendor "Qualcomm" for product "Sd 8cx"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sxr1130 Firmware Search vendor "Qualcomm" for product "Sxr1130 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sxr1130 Search vendor "Qualcomm" for product "Sxr1130"	-	-	Safe