CVE-2019-14081
Severity CVSS v4.0:
Pending analysis
Type:
CWE-125
Out-of-bounds Read
Publication date:
05/03/2020
Last modified:
06/03/2020
Description
Buffer Over-read when WLAN module gets a WMI message for SAR limits with invalid number of limits to be enforced in Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in APQ8098, IPQ8074, MSM8998, QCA8081, QCN7605, QCS605, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SM8150, SXR1130
Impact
Base Score 3.x
7.10
Severity 3.x
HIGH
Base Score 2.0
6.60
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:o:qualcomm:apq8098_firmware:-:*:*:*:*:*:*:* | ||
cpe:2.3:h:qualcomm:apq8098:-:*:*:*:*:*:*:* | ||
cpe:2.3:o:qualcomm:ipq8074_firmware:-:*:*:*:*:*:*:* | ||
cpe:2.3:h:qualcomm:ipq8074:-:*:*:*:*:*:*:* | ||
cpe:2.3:o:qualcomm:msm8998_firmware:-:*:*:*:*:*:*:* | ||
cpe:2.3:h:qualcomm:msm8998:-:*:*:*:*:*:*:* | ||
cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:* | ||
cpe:2.3:h:qualcomm:qca8081:-:*:*:*:*:*:*:* | ||
cpe:2.3:o:qualcomm:qcn7605_firmware:-:*:*:*:*:*:*:* | ||
cpe:2.3:h:qualcomm:qcn7605:-:*:*:*:*:*:*:* | ||
cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:* | ||
cpe:2.3:h:qualcomm:qcs605:-:*:*:*:*:*:*:* | ||
cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:* | ||
cpe:2.3:h:qualcomm:sda660:-:*:*:*:*:*:*:* | ||
cpe:2.3:o:qualcomm:sda845_firmware:-:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page