CVEvulnerability
CVE-2019-14119
7.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-09-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.0 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-367, CWE-787
Description
u'While processing SMCInvoke asynchronous message header, message count is modified leading to a TOCTOU race condition and lead to memory corruption' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ6018, Kamorta, MDM9205, MDM9607, Nicobar, QCS404, QCS405, QCS605, QCS610, Rennell, SA415M, SA515M, SA6155P, SC7180, SC8180X, SDM670, SDM710, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
Affected configurations
• qualcomm ipq6018 firmware
• qualcomm kamorta firmware
• qualcomm mdm9205 firmware
• qualcomm mdm9607 firmware
• qualcomm nicobar firmware
• qualcomm qcs404 firmware
• qualcomm qcs405 firmware
• qualcomm qcs605 firmware
• qualcomm qcs610 firmware
• qualcomm rennell firmware
• qualcomm sa415m firmware
• qualcomm sa515m firmware
• qualcomm sa6155p firmware
• qualcomm sc7180 firmware
• qualcomm sc8180x firmware
• qualcomm sdm670 firmware
• qualcomm sdm710 firmware
• qualcomm sdx24 firmware
• qualcomm sdx55 firmware
• qualcomm sm6150 firmware
• qualcomm sm7150 firmware
• qualcomm sm8150 firmware
• qualcomm sm8250 firmware
• qualcomm sxr1130 firmware
• qualcomm sxr2130 firmware