CVEvulnerability
CVE-2019-14131
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2020-04-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-787
Description
Out of bound write can occur in radio measurement request if STA receives multiple invalid rrm measurement request from AP in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8053, APQ8096AU, MSM8998, Nicobar, QCA6574AU, QCS605, Rennell, SA6155P, Saipan, SC8180X, SDM660, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130
Affected configurations
• qualcomm apq8053 firmware
• qualcomm apq8096au firmware
• qualcomm msm8998 firmware
• qualcomm nicobar firmware
• qualcomm qca6574au firmware
• qualcomm qcs605 firmware
• qualcomm rennell firmware
• qualcomm sa6155p firmware
• qualcomm saipan firmware
• qualcomm sc8180x firmware
• qualcomm sdm660 firmware
• qualcomm sdm710 firmware
• qualcomm sdm845 firmware
• qualcomm sdx20 firmware
• qualcomm sdx24 firmware
• qualcomm sdx55 firmware
• qualcomm sm6150 firmware
• qualcomm sm7150 firmware
• qualcomm sm8150 firmware
• qualcomm sm8250 firmware
• qualcomm sxr2130 firmware
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://www.qualcomm.com/company/product-security/bulletins/april-2020-bulletin Patch, Vendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins/april-2020-bulletin Patch, Vendor Advisory