CVEvulnerability

CVE-2019-14066

7.8 HIGH Published 2020-06-02 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-06-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-190

Description

Integer overflow in calculating estimated output buffer size when getting a list of installed Feature IDs, Serial Numbers or checking Feature ID status in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in Kamorta, MDM9205, MDM9607, Nicobar, QCS404, QCS405, Rennell, SA6155P, SC7180, SC8180X, SDX55, SM6150, SM7150, SXR2130

Affected configurations

• qualcomm kamorta firmware • qualcomm mdm9205 firmware • qualcomm mdm9607 firmware • qualcomm nicobar firmware • qualcomm qcs404 firmware • qualcomm qcs405 firmware • qualcomm rennell firmware • qualcomm sa6155p firmware • qualcomm sc7180 firmware • qualcomm sc8180x firmware • qualcomm sdx55 firmware • qualcomm sm6150 firmware • qualcomm sm7150 firmware • qualcomm sxr2130 firmware

Related

Weakness · CWE (1)

  • CWE-190 Integer Overflow or Wraparound weakness

References