CVE-2019-2246

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-11-06 · updated 2026-06-17
Weakness: CWE-787

Description

Thread start can cause invalid memory writes to arbitrary memory location since the argument is passed by user to kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9205, MDM9640, MSM8996AU, QCA6574, QCS605, Qualcomm 215, SD 425, SD 427, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX24, Snapdragon_High_Med_2016, SXR1130

Affected products

Qualcomm Mdm9205 Firmware: all versions
Qualcomm Mdm9640 Firmware: all versions
Qualcomm Msm8996Au Firmware: all versions
Qualcomm Qca6574 Firmware: all versions
Qualcomm Qcs605 Firmware: all versions
Qualcomm 215 Firmware: all versions
Qualcomm Sd 425 Firmware: all versions
Qualcomm Sd 427 Firmware: all versions
Qualcomm Sd 429 Firmware: all versions
Qualcomm Sd 435 Firmware: all versions
Qualcomm Sd 439 Firmware: all versions
Qualcomm Sd 450 Firmware: all versions
Qualcomm Sd 625 Firmware: all versions
Qualcomm Sd 636 Firmware: all versions
Qualcomm Sd 665 Firmware: all versions
Qualcomm Sd 670 Firmware: all versions
Qualcomm Sd 675 Firmware: all versions
Qualcomm Sd 710 Firmware: all versions
Qualcomm Sd 712 Firmware: all versions
Qualcomm Sd 730 Firmware: all versions
Qualcomm Sd 820 Firmware: all versions
Qualcomm Sd 835 Firmware: all versions
Qualcomm Sd 845 Firmware: all versions
Qualcomm Sd 850 Firmware: all versions
Qualcomm Sd 855 Firmware: all versions
Qualcomm Sd 8Cx Firmware: all versions
Qualcomm Sda660 Firmware: all versions
Qualcomm Sdm439 Firmware: all versions
Qualcomm Sdm630 Firmware: all versions
Qualcomm Sdm660 Firmware: all versions

References

Get alerted when CVE-2019-2246 or the next vulnerability affects your stack