NetSight
critical9.8

CVE-2019-14134

Possible out of bound access in WLAN handler when the received value of length in rx path is shorter than the expected value of country IE in Snapdragon Comput…

Impact

Possible out of bound access in WLAN handler when the received value of length in rx path is shorter than the expected value of country IE in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ8074, QCA8081, QCS605, SDA845, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SXR1130

Affected products

VendorProductAffected versions
QualcommIpq8074 Firmware
All versions
QualcommQca8081 Firmware
All versions
QualcommQcs605 Firmware
All versions
QualcommSda845 Firmware
All versions
QualcommSdm670 Firmware
All versions
QualcommSdm710 Firmware
All versions
QualcommSdm845 Firmware
All versions
QualcommSdm850 Firmware
All versions
QualcommSm6150 Firmware
All versions
QualcommSm7150 Firmware
All versions
QualcommSm8150 Firmware
All versions
QualcommSxr1130 Firmware
All versions

Weakness classification

References