{"schemaVersion":3,"id":"CVE-2019-2237","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Failure in taking appropriate action to handle the error case If keypad gpio deactivation fails leads to silent failure scenario and subsequent logic gets executed everytime in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 8CX, SXR1130","dates":{"published":"2019-07-25T16:33:17.000Z","modified":"2024-08-04T18:42:51.203Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.5,"severity":"medium","version":"3.0","versionLabel":"v3.0","source":"NVD","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":5.5,"severity":"medium","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":2.1,"severity":"low","vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00179,"percentile":0.07098,"severity":"low","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":-0.009000000000000001,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.00188},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00188,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.00179,"percentile":0.07098}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.00188,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.00179,"percentile":0.07098}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-388","name":"7PK - Errors","description":"This category represents one of the phyla in the Seven Pernicious Kingdoms vulnerability classification. It includes weaknesses that occur when an application does not properly handle errors that occur during processing. According to the authors of the Seven Pernicious Kingdoms, \"Errors and error handling represent a class of API. Errors related to error handling are so common that they deserve a special kingdom of their own. As with 'API Abuse,' there are two ways to introduce an error-related security vulnerability: the most common one is handling errors poorly (or not at all). The second is producing errors that either give out too much information (to possible attackers) or are difficult to handle.\"","type":"category","status":"Draft","abstraction":null,"likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/388.html"}],"affected":[{"vendor":"qualcomm, inc.","product":"snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile","name":"Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile","label":"snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 8CX, SXR1130","noFixRecorded":false,"fixedIn":null}],"versionsText":"MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 8CX, SXR1130","eol":null,"hubHref":"/vendor/qualcomm_inc/snapdragon_auto_snapdragon_compute_snapdragon_consumer_electronics_connectivity_snapdragon_consumer_iot_snapdragon_industrial_iot_snapdragon_mobile"},{"vendor":"qualcomm","product":"mdm9206_firmware","name":"mdm9206 firmware","label":"mdm9206_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/mdm9206"},{"vendor":"qualcomm","product":"mdm9607_firmware","name":"mdm9607 firmware","label":"mdm9607_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/mdm9607"},{"vendor":"qualcomm","product":"mdm9650_firmware","name":"mdm9650 firmware","label":"mdm9650_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/mdm9650"},{"vendor":"qualcomm","product":"mdm9655_firmware","name":"mdm9655 firmware","label":"mdm9655_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/mdm9655"},{"vendor":"qualcomm","product":"qcs605_firmware","name":"qcs605 firmware","label":"qcs605_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/qcs605"},{"vendor":"qualcomm","product":"sd_205_firmware","name":"sd 205 firmware","label":"sd_205_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/sd_205"},{"vendor":"qualcomm","product":"sd_210_firmware","name":"sd 210 firmware","label":"sd_210_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/sd_210"},{"vendor":"qualcomm","product":"sd_212_firmware","name":"sd 212 firmware","label":"sd_212_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/sd_212"},{"vendor":"qualcomm","product":"sd_410_firmware","name":"sd 410 firmware","label":"sd_410_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/sd_410"},{"vendor":"qualcomm","product":"sd_412_firmware","name":"sd 412 firmware","label":"sd_412_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/sd_412"},{"vendor":"qualcomm","product":"sd_670_firmware","name":"sd 670 firmware","label":"sd_670_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/sd_670"},{"vendor":"qualcomm","product":"sd_675_firmware","name":"sd 675 firmware","label":"sd_675_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/sd_675"},{"vendor":"qualcomm","product":"sd_710_firmware","name":"sd 710 firmware","label":"sd_710_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/sd_710"},{"vendor":"qualcomm","product":"sd_712_firmware","name":"sd 712 firmware","label":"sd_712_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/sd_712"},{"vendor":"qualcomm","product":"sd_730_firmware","name":"sd 730 firmware","label":"sd_730_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/sd_730"},{"vendor":"qualcomm","product":"sd_8cx_firmware","name":"sd 8cx firmware","label":"sd_8cx_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/sd_8cx"},{"vendor":"qualcomm","product":"sxr1130_firmware","name":"sxr1130 firmware","label":"sxr1130_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/sxr1130"}],"affectedCount":18,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins","label":"www.qualcomm.com/company/product-security/bulletins","hostname":"www.qualcomm.com","tags":["X Refsource CONFIRM","Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2019-07-25T16:33:17.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-04T18:42:51.203Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":22,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T22:20:01.728Z","stale":false,"partial":false}}