CVE-2019-2268

Possible OOB read issue in P2P action frames while handling WLAN management frame in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon…

published November 21, 2019

CVSS
—
EPSS
1%
Percentile
53.0
In the wild
Unconfirmed
What it is

⚠️ An out-of-bounds read issue lurks in the WLAN management frames of various Snapdragon platforms! 📡 Think of this like a delivery person reading confidential information from packages left unattended in a public space — sensitive data could be exposed because of a slight oversight in package handling. 📦 If exploited, an attacker could potentially read information that should have been safeguarded, leading to unauthorized access and privacy concerns. While this isn't actively exploited, it's better to be safe than sorry!

Put simply

Think of this like a delivery person reading confidential information from packages left unattended in a public space — sensitive data could be exposed because of a slight oversight in package handling. 📦 This vulnerability occurs due to mishandling of P2P action frames in WLAN management, allowing an out-of-bounds read that could expose sensitive information. It's like a misconfigured mail sorting system that doesn't check its limits before accessing data.

What to do

If exploited, an attacker could potentially read information that should have been safeguarded, leading to unauthorized access and privacy concerns. While this isn't actively exploited, it's better to be safe than sorry! To mitigate this issue, ensure your firmware is updated to the latest version provided by Qualcomm. Regularly check for updates on affected Snapdragon devices and apply patches as necessary to enhance security. 🛡️ You've got this! Stay proactive and keep your devices secure with these updates! 🚀

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00711 · 53.0th percentile
Published
2019-11-21T14:38Z
EPSS history
Timeline
  • 21 NOV 14:38Z
    Possible OOB read issue in P2P action frames while handling WLAN management frame in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon…
    cvelistv5