NetSight
high7.8

CVE-2019-14030

The size of a buffer is determined by addition and multiplications operations that have the potential to overflow due to lack of bound check in Snapdragon Auto…

Impact

The size of a buffer is determined by addition and multiplications operations that have the potential to overflow due to lack of bound check in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9205, QCS404, Rennell, SC8180X, SDM845, SDM850, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130

Affected products

VendorProductAffected versions
QualcommMdm9205 Firmware
All versions
QualcommQcs404 Firmware
All versions
QualcommRennell Firmware
All versions
QualcommSc8180x Firmware
All versions
QualcommSdm845 Firmware
All versions
QualcommSdm850 Firmware
All versions
QualcommSdx55 Firmware
All versions
QualcommSm6150 Firmware
All versions
QualcommSm7150 Firmware
All versions
QualcommSm8150 Firmware
All versions
QualcommSm8250 Firmware
All versions
QualcommSxr2130 Firmware
All versions

Weakness classification

References