NetSight
high7.8

CVE-2019-14078

Out of bound memory access while processing qpay due to not validating length of the response buffer provided by User.

Impact

Out of bound memory access while processing qpay due to not validating length of the response buffer provided by User. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8098, MSM8909, MSM8998, SDA660, SDA845, SDM630, SDM636, SDM660, SDM845

Affected products

VendorProductAffected versions
QualcommApq8009 Firmware
All versions
QualcommApq8098 Firmware
All versions
QualcommMsm8909 Firmware
All versions
QualcommMsm8998 Firmware
All versions
QualcommSda660 Firmware
All versions
QualcommSda845 Firmware
All versions
QualcommSdm630 Firmware
All versions
QualcommSdm636 Firmware
All versions
QualcommSdm660 Firmware
All versions
QualcommSdm845 Firmware
All versions

Weakness classification

References