CVE-2019-2331

Possible Integer overflow because of subtracting two integers without checking if the result would overflow or not in Snapdragon Auto, Snapdragon Compute…

published November 6, 2019

CVSS
—
EPSS
1%
Percentile
67.2
In the wild
Unconfirmed
What it is

⚠️ A sneaky integer overflow lurks in Snapdragon chips, ready to cause chaos when two integers subtract without a safety net! 🔥 Think of it like a waiter who takes away two plates but forgets to check if you actually had enough to start with — if you're not careful, you could end up in a world of trouble with empty tables or over-ordered meals! If exploited, this vulnerability could lead to unexpected behaviors in the affected devices, potentially causing system crashes or erratic performance. It's like your car suddenly forgetting how to brake because it miscalculated the distance!

Put simply

Think of it like a waiter who takes away two plates but forgets to check if you actually had enough to start with — if you're not careful, you could end up in a world of trouble with empty tables or over-ordered meals! This vulnerability arises from the absence of checks to prevent integer overflow during subtraction operations in various Snapdragon platforms, which can lead to incorrect calculations and unpredictable behavior.

What to do

If exploited, this vulnerability could lead to unexpected behaviors in the affected devices, potentially causing system crashes or erratic performance. It's like your car suddenly forgetting how to brake because it miscalculated the distance! Qualcomm has released updates to address this issue, so check for updates for affected devices such as Snapdragon 820, 845, and more. Make sure to apply these patches promptly if you haven’t already! You've got this! Stay vigilant and keep those devices updated to maintain rock-solid security! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01169 · 67.2th percentile
Published
2019-11-06T17:11Z
EPSS history
Timeline
  • 06 NOV 17:11Z
    Possible Integer overflow because of subtracting two integers without checking if the result would overflow or not in Snapdragon Auto, Snapdragon Compute…
    cvelistv5