NetSight
high7.8

CVE-2019-14123

Possible buffer overflow and over read possible due to missing bounds checks for fixed limits if we consider widevine HLOS client as non-trustable in Snapdrago…

Impact

Possible buffer overflow and over read possible due to missing bounds checks for fixed limits if we consider widevine HLOS client as non-trustable in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Kamorta, QCS404, Rennell, SC7180, SDX55, SM6150, SM7150, SM8250, SXR2130

Affected products

VendorProductAffected versions
QualcommKamorta Firmware
All versions
QualcommQcs404 Firmware
All versions
QualcommRennell Firmware
All versions
QualcommSc7180 Firmware
All versions
QualcommSdx55 Firmware
All versions
QualcommSm6150 Firmware
All versions
QualcommSm7150 Firmware
All versions
QualcommSm8250 Firmware
All versions
QualcommSxr2130 Firmware
All versions

Weakness classification

References