NetSight
high7.1

CVE-2019-14043

Out of bound read in Fingerprint application due to requested data is being used without length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connec…

Impact

Out of bound read in Fingerprint application due to requested data is being used without length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in Kamorta, MDM9150, MDM9205, MDM9650, MSM8998, Nicobar, QCS404, QCS405, QCS605, Rennell, SA415M, SA6155P, SC7180, SC8180X, SDA660, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Affected products

VendorProductAffected versions
QualcommKamorta Firmware
All versions
QualcommMdm9150 Firmware
All versions
QualcommMdm9205 Firmware
All versions
QualcommMdm9650 Firmware
All versions
QualcommMsm8998 Firmware
All versions
QualcommNicobar Firmware
All versions
QualcommQcs404 Firmware
All versions
QualcommQcs405 Firmware
All versions
QualcommQcs605 Firmware
All versions
QualcommRennell Firmware
All versions
QualcommSa415m Firmware
All versions
QualcommSa6155p Firmware
All versions

Weakness classification

References