{"affected":[{"affectedData":[{"product":"Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile","vendor":"Qualcomm, Inc.","versions":[{"status":"affected","version":"QCS605, SD 675, SD 712 / SD 710 / SD 670, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SM7150, SXR1130"}]}],"source":"product-security@qualcomm.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"B05FD66D-13A6-40E9-A64B-E428378F237E","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:qcs605:-:*:*:*:*:*:*:*","matchCriteriaId":"D0D665C1-3EBA-42F2-BF56-55E6C365F7DF","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sd_675_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"3F900C8F-9763-441A-B97E-E5394A68A08A","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sd_675:-:*:*:*:*:*:*:*","matchCriteriaId":"589C1001-E9F6-41A6-BCC8-A94A3C97F2E6","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sd_712_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"6BFF8872-645F-4A05-BAF9-7797CFBE37C6","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sd_712:-:*:*:*:*:*:*:*","matchCriteriaId":"9CB91AFF-C149-4F5C-92EC-E78E66935528","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sd_710_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"2B529780-DB0A-4F9C-AE63-6DEC593B86E5","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sd_710:-:*:*:*:*:*:*:*","matchCriteriaId":"669E7360-E8C3-4BB8-A3B6-61BD58AFAF62","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sd_670_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"D49606C5-7306-4F33-864C-C1905594F09C","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sd_670:-:*:*:*:*:*:*:*","matchCriteriaId":"B43964AF-7CEC-420A-935B-D3895B2BAC70","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*","matchCriteriaId":"F930E9BF-C502-49C6-8BE8-9A711B89FA1B","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"0A2D2B3B-CB28-46AA-9117-A7FA371FDE80","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*","matchCriteriaId":"DE18BF66-B0DB-48BB-B43A-56F01821F5A3","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"0C10C7CB-3B66-4F17-8146-6A85611E2BA9","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sd_850:-:*:*:*:*:*:*:*","matchCriteriaId":"B9DA765F-53DE-4FB0-B825-6C11B3177641","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sd_855_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"91400943-3D25-4E44-9FFD-9E3076305D80","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sd_855:-:*:*:*:*:*:*:*","matchCriteriaId":"57B16867-710D-4748-8636-635E2C6F7389","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sd_8cx_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"A71D1A7C-537F-458B-BA56-A11F95E36EA9","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sd_8cx:-:*:*:*:*:*:*:*","matchCriteriaId":"716DEC4D-D854-44CD-8A14-AA5AFD96809E","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sm7150_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"F63A748F-2236-4486-83F1-DE4BCBE5D56D","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sm7150:-:*:*:*:*:*:*:*","matchCriteriaId":"184F3DFC-27E8-48AC-B46C-C589DBCBF030","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sxr1130_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"096F7BA5-FF58-416B-93EF-733B16326C86","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sxr1130:-:*:*:*:*:*:*:*","matchCriteriaId":"7AF958FB-1611-4102-A2DB-8D4311AE0D72","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Kernel can write to arbitrary memory address passed by user while freeing/stopping a thread in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCS605, SD 675, SD 712 / SD 710 / SD 670, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SM7150, SXR1130"},{"lang":"es","value":"El kernel puede escribir hacia la dirección de memoria arbitraria pasada por el usuario mientras el proceso de liberar/detener un hilo (thread) en Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile en las versiones QCS605, SD 675, SD 712 / SD 710 / SD 670, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SM7150, SXR1130."}],"id":"CVE-2019-2250","lastModified":"2026-06-17T02:33:31.620","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"COMPLETE","baseScore":7.2,"confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","version":"2.0"},"exploitabilityScore":3.9,"impactScore":10.0,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.0"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2019-05-24T17:29:02.820","references":[{"source":"product-security@qualcomm.com","tags":["Vendor Advisory"],"url":"https://www.qualcomm.com/company/product-security/bulletins#_CVE-2019-2250"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.qualcomm.com/company/product-security/bulletins#_CVE-2019-2250"}],"sourceIdentifier":"product-security@qualcomm.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"CWE-119"}],"source":"nvd@nist.gov","type":"Primary"}]}