CVE Feed

    Dashboard / CVE / CVE-2019-14030

    CVE-2019-14030

    The size of a buffer is determined by addition and multiplications operations that have the potential to overflow due to lack of bound check in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9205, QCS404, Rennell, SC8180X, SDM845, SDM850, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130

    Published:Mar 5, 2020
    Last Modified:Nov 21, 2024
    EPS:Mar 5, 2020
    EPSS Score:0.00033
    CVSS Score:7.8

    Affected Products

    Vendor
    Qualcomm
    Product
    Mdm9205
    Vendor
    Qualcomm
    Product
    Mdm9205 Firmware
    Vendor
    Qualcomm
    Product
    Qcs404
    Vendor
    Qualcomm
    Product
    Qcs404 Firmware
    Vendor
    Qualcomm
    Product
    Rennell
    Vendor
    Qualcomm
    Product
    Rennell Firmware
    Vendor
    Qualcomm
    Product
    Sc8180x
    Vendor
    Qualcomm
    Product
    Sc8180x Firmware
    Vendor
    Qualcomm
    Product
    Sdm845
    Vendor
    Qualcomm
    Product
    Sdm845 Firmware
    Vendor
    Qualcomm
    Product
    Sdm850
    Vendor
    Qualcomm
    Product
    Sdm850 Firmware
    Vendor
    Qualcomm
    Product
    Sdx55
    Vendor
    Qualcomm
    Product
    Sdx55 Firmware
    Vendor
    Qualcomm
    Product
    Sm6150
    Vendor
    Qualcomm
    Product
    Sm6150 Firmware
    Vendor
    Qualcomm
    Product
    Sm7150
    Vendor
    Qualcomm
    Product
    Sm7150 Firmware
    Vendor
    Qualcomm
    Product
    Sm8150
    Vendor
    Qualcomm
    Product
    Sm8150 Firmware
    Vendor
    Qualcomm
    Product
    Sm8250
    Vendor
    Qualcomm
    Product
    Sm8250 Firmware
    Vendor
    Qualcomm
    Product
    Sxr2130
    Vendor
    Qualcomm
    Product
    Sxr2130 Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2023-21651 (CVSS 9.3) — Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.…
    CVE-2023-21626 (CVSS 7.1) — Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more tha…
    CVE-2023-21625 (CVSS 8.2) — Information disclosure in Network Services due to buffer over-read while the device receives DNS response.…
    CVE-2022-33295 (CVSS 8.2) — Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffe…
    CVE-2022-33294 (CVSS 7.5) — Transient DOS in Modem due to NULL pointer dereference while receiving response of lwm2m registration/update/b…
    CVE-2022-33259 (CVSS 9.8) — Memory corruption due to buffer copy without checking the size of input in modem while decoding raw SMS receiv…
    CVE-2022-33258 (CVSS 8.2) — Information disclosure due to buffer over-read in modem while reading configuration parameters.…
    CVE-2022-33231 (CVSS 9.3) — Memory corruption due to double free in core while initializing the encryption key.…
    CVE-2022-33228 (CVSS 8.2) — Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destin…
    CVE-2022-33223 (CVSS 7.5) — Transient DOS in Modem due to null pointer dereference while processing the incoming packet with http chunked …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High