CVE-2019-2285 is a critical out-of-bounds write vulnerability affecting numerous Qualcomm Snapdragon platforms across various product lines, including automotive, mobile, and IoT devices. This flaw, rated 9.8 CVSS, allows unauthenticated attackers to remotely execute arbitrary code with high impact on confidentiality, integrity, and availability, requiring no user interaction. Despite its severity, there is currently no public exploit code available (Metasploit, Nuclei, ExploitDB), nor is it listed on CISA's KEV catalog. Community discussion and media coverage for this CVE are minimal, suggesting low public awareness or active exploitation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:qualcomm:qualcomm_215_firmware:-:*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.