What is CVE-2019-2237?

CVE-2019-2237 is a medium-severity vulnerability in Qualcomm Mdm9206, classified under CWE-388. CVSS score: 5.5/10. Published 2019-07-25.

How severe is CVE-2019-2237?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Vulnerability in Qualcomm Mdm9206

CVE-2019-2237

Failure in taking appropriate action to handle the error case If keypad gpio deactivation fails leads to silent failure scenario and subsequent logic gets executed everytime in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 8CX, SXR1130

EPSS: 0.002 (7.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N.

Affected products

Weakness classification (CWE)

CWE-388

References

product-security@qualcomm.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2019-2237?: CVE-2019-2237 is a medium-severity vulnerability in Qualcomm Mdm9206, classified under CWE-388. CVSS score: 5.5/10. Published 2019-07-25.
How severe is CVE-2019-2237?: Medium severity. CVSS v3 base score is 5.5 out of 10.