critical9.8
CVE-2019-14112
Potential buffer overflow while processing CBF frames due to lack of check of buffer length before copy in Snapdragon Auto, Snapdragon Compute, Snapdragon Cons…
Impact
Potential buffer overflow while processing CBF frames due to lack of check of buffer length before copy in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in APQ8098, IPQ6018, IPQ8074, MSM8998, Nicobar, QCA8081, QCN7605, QCS404, QCS605, Rennell, SC7180, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SXR1130, SXR2130
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qualcomm | Apq8098 Firmware | All versions |
| Qualcomm | Ipq6018 Firmware | All versions |
| Qualcomm | Ipq8074 Firmware | All versions |
| Qualcomm | Msm8998 Firmware | All versions |
| Qualcomm | Nicobar Firmware | All versions |
| Qualcomm | Qca8081 Firmware | All versions |
| Qualcomm | Qcn7605 Firmware | All versions |
| Qualcomm | Qcs404 Firmware | All versions |
| Qualcomm | Qcs605 Firmware | All versions |
| Qualcomm | Rennell Firmware | All versions |
| Qualcomm | Sc7180 Firmware | All versions |
| Qualcomm | Sc8180x Firmware | All versions |