CVEvulnerability
CVE-2019-14068
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-03-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-120
Description
Out of bound access in msm routing due to lack of check of size before accessing in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, APQ8096AU, MDM9607, MSM8905, MSM8909W, Nicobar, QCS405, QCS605, Rennell, Saipan, SDM429W, SDM845, SDX20, SDX24, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
Affected configurations
• qualcomm apq8009 firmware
• qualcomm apq8053 firmware
• qualcomm apq8096au firmware
• qualcomm mdm9607 firmware
• qualcomm msm8905 firmware
• qualcomm msm8909w firmware
• qualcomm nicobar firmware
• qualcomm qcs405 firmware
• qualcomm qcs605 firmware
• qualcomm rennell firmware
• qualcomm saipan firmware
• qualcomm sdm429w firmware
• qualcomm sdm845 firmware
• qualcomm sdx20 firmware
• qualcomm sdx24 firmware
• qualcomm sm6150 firmware
• qualcomm sm7150 firmware
• qualcomm sm8150 firmware
• qualcomm sm8250 firmware
• qualcomm sxr1130 firmware
• qualcomm sxr2130 firmware
Related
Weakness · CWE (1)
- CWE-120 Buffer Copy without Checking Size of Input weakness
References
- https://www.qualcomm.com/company/product-security/bulletins/march-2020-bulletin Patch, Vendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins/march-2020-bulletin Patch, Vendor Advisory