NetSight
high7.8

CVE-2019-14015

A stack-based buffer overflow exists in the initialization of the identification stage due to lack of check on the number of templates provided.

Impact

A stack-based buffer overflow exists in the initialization of the identification stage due to lack of check on the number of templates provided. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8096, APQ8096AU, MDM9205, MSM8996, MSM8996AU, Nicobar, QCS404, QCS405, QCS605, Rennell, SA6155P, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130, SXR2130

Affected products

VendorProductAffected versions
QualcommApq8096 Firmware
All versions
QualcommApq8096au Firmware
All versions
QualcommMdm9205 Firmware
All versions
QualcommMsm8996 Firmware
All versions
QualcommMsm8996au Firmware
All versions
QualcommNicobar Firmware
All versions
QualcommQcs404 Firmware
All versions
QualcommQcs405 Firmware
All versions
QualcommQcs605 Firmware
All versions
QualcommRennell Firmware
All versions
QualcommSa6155p Firmware
All versions
QualcommSc8180x Firmware
All versions

Weakness classification

References