ZeroHour

CVE-2019-14056

CVSS 3.1
7.8 high
EPSS
<1%p10
Published
()
Modified
Description

u'Possible integer overflow in API due to lack of check on large oid range count in cert extension field' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in Kamorta, MDM9150, MDM9205, MDM9607, MDM9650, Nicobar, QCS404, QCS405, QCS605, QCS610, Rennell, SA6155P, SC7180, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX55, SM6150, SM7150, SM8150, SXR1130, SXR2130

Vendors
qualcomm
Products
kamorta firmware, mdm9150 firmware, mdm9205 firmware, mdm9607 firmware, mdm9650 firmware, nicobar firmware, qcs404 firmware, qcs405 firmware, qcs605 firmware, qcs610 firmware, rennell firmware, sa6155p firmware
Weakness
CWE-190
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.