CVE-2019-2276: Qualcomm MDM9607 Firmware

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Possible out of bound read occurs while processing beaconing request due to lack of check on action frames received from user controlled space in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9607, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCS405, QCS605, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 845 / SD 850, SD 855, SDM630, SDM660, SDX24

Affected products

• Qualcomm MDM9607 Firmware: affected versions not specified
• Qualcomm MSM8996AU Firmware: affected versions not specified
• Qualcomm QCA6174A Firmware: affected versions not specified
• Qualcomm QCA6574AU Firmware: affected versions not specified
• Qualcomm QCA9377 Firmware: affected versions not specified
• Qualcomm QCA9379 Firmware: affected versions not specified
• Qualcomm QCS405 Firmware: affected versions not specified
• Qualcomm QCS605 Firmware: affected versions not specified
• Qualcomm Sd 636 Firmware: affected versions not specified
• Qualcomm Sd 665 Firmware: affected versions not specified
• Qualcomm Sd 670 Firmware: affected versions not specified
• Qualcomm Sd 675 Firmware: affected versions not specified
• Qualcomm Sd 710 Firmware: affected versions not specified
• Qualcomm Sd 712 Firmware: affected versions not specified
• Qualcomm Sd 730 Firmware: affected versions not specified
• Qualcomm Sd 820a Firmware: affected versions not specified
• Qualcomm Sd 845 Firmware: affected versions not specified
• Qualcomm Sd 850 Firmware: affected versions not specified
• Qualcomm Sd 855 Firmware: affected versions not specified
• Qualcomm SDM630 Firmware: affected versions not specified
• Qualcomm SDM660 Firmware: affected versions not specified
• Qualcomm SDX24 Firmware: affected versions not specified

Published 2019-07-25. Last modified 2026-06-17.