ZeroHour

CVE-2019-14022

CVSS 3.1
7.5 high
EPSS
<1%p55
Published
()
Modified
Description

Error occurs While extracting the ipv6_header having an invalid length due to lack of length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8096AU, MDM9205, MDM9206, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, Nicobar, QCM2150, QCS605, QM215, Rennell, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Vendors
qualcomm
Products
apq8096au firmware, mdm9205 firmware, mdm9206 firmware, mdm9607 firmware, mdm9640 firmware, mdm9650 firmware, msm8905 firmware, msm8909 firmware, msm8917 firmware, msm8920 firmware, msm8937 firmware, msm8940 firmware
Weakness
CWE-617
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.