CVE-2019-2322

Buffer overflow can occur when playing specific clip which is non-standard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…

published July 25, 2019

CVSS
—
EPSS
1%
Percentile
59.4
In the wild
Unconfirmed
What it is

⚠️ A buffer overflow can be triggered just by playing a non-standard clip on various Snapdragon platforms! 🎶 Imagine a music playlist that keeps adding extra tracks without checking if your speakers can handle it — eventually, those speakers can blow out! This vulnerability allows an attacker to overflow memory in Snapdragon devices, risking instability or crashes. An attacker could exploit this by sending a crafted clip, potentially causing the device to crash or behave unexpectedly. This could lead to unauthorized access or even remote code execution if the attacker plays their cards right, making it a surprisingly sneaky issue!

Put simply

Imagine a music playlist that keeps adding extra tracks without checking if your speakers can handle it — eventually, those speakers can blow out! This vulnerability allows an attacker to overflow memory in Snapdragon devices, risking instability or crashes. This vulnerability arises from insufficient bounds checking in the audio playback functionality, causing memory to overflow when specific non-standard clips are played on affected Snapdragon chipsets.

What to do

An attacker could exploit this by sending a crafted clip, potentially causing the device to crash or behave unexpectedly. This could lead to unauthorized access or even remote code execution if the attacker plays their cards right, making it a surprisingly sneaky issue! To remediate this, ensure your device firmware is updated to the latest version provided by the manufacturer. Regularly check for security patches and avoid playing unverified audio clips on your Snapdragon devices. 🛡️ You've got this! By staying updated and cautious, you can protect your devices. 🎉

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00903 · 59.4th percentile
Published
2019-07-25T16:33Z
EPSS history
Timeline
  • 25 JUL 16:33Z
    Buffer overflow can occur when playing specific clip which is non-standard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
    cvelistv5