NetSight
high7.8

CVE-2019-14066

Integer overflow in calculating estimated output buffer size when getting a list of installed Feature IDs, Serial Numbers or checking Feature ID status in Snap…

Impact

Integer overflow in calculating estimated output buffer size when getting a list of installed Feature IDs, Serial Numbers or checking Feature ID status in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in Kamorta, MDM9205, MDM9607, Nicobar, QCS404, QCS405, Rennell, SA6155P, SC7180, SC8180X, SDX55, SM6150, SM7150, SXR2130

Affected products

VendorProductAffected versions
QualcommKamorta Firmware
All versions
QualcommMdm9205 Firmware
All versions
QualcommMdm9607 Firmware
All versions
QualcommNicobar Firmware
All versions
QualcommQcs404 Firmware
All versions
QualcommQcs405 Firmware
All versions
QualcommRennell Firmware
All versions
QualcommSa6155p Firmware
All versions
QualcommSc7180 Firmware
All versions
QualcommSc8180x Firmware
All versions
QualcommSdx55 Firmware
All versions
QualcommSm6150 Firmware
All versions

Weakness classification

References