CVE-2019-14080
—CVSS 3.1
9.8 critical
EPSS
<1%p51
Published
()
Modified
Description
Out of bound write can happen due to lack of check of array index value while parsing SDP attribute for SAR in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8053, APQ8096AU, Kamorta, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, Nicobar, QCM2150, QCS605, QM215, Rennell, SA415M, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SM6150, SM7150, SM8150, SXR1130
- Vendors
- qualcomm
- Products
- apq8053 firmware, apq8096au firmware, kamorta firmware, mdm9607 firmware, mdm9640 firmware, mdm9650 firmware, msm8905 firmware, msm8909 firmware, msm8917 firmware, msm8920 firmware, msm8937 firmware, msm8940 firmware
- Weakness
- CWE-129, CWE-787
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.