NetSight
high7.0

CVE-2019-14119

u'While processing SMCInvoke asynchronous message header, message count is modified leading to a TOCTOU race condition and lead to memory corruption' in Snapdr…

Impact

u'While processing SMCInvoke asynchronous message header, message count is modified leading to a TOCTOU race condition and lead to memory corruption' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ6018, Kamorta, MDM9205, MDM9607, Nicobar, QCS404, QCS405, QCS605, QCS610, Rennell, SA415M, SA515M, SA6155P, SC7180, SC8180X, SDM670, SDM710, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Affected products

VendorProductAffected versions
QualcommIpq6018 Firmware
All versions
QualcommKamorta Firmware
All versions
QualcommMdm9205 Firmware
All versions
QualcommMdm9607 Firmware
All versions
QualcommNicobar Firmware
All versions
QualcommQcs404 Firmware
All versions
QualcommQcs405 Firmware
All versions
QualcommQcs605 Firmware
All versions
QualcommQcs610 Firmware
All versions
QualcommRennell Firmware
All versions
QualcommSa415m Firmware
All versions
QualcommSa515m Firmware
All versions

Weakness classification

References