Lucene search

[email protected]CVE-2019-14039

HistoryJun 02, 2020 - 3:15 p.m.

CVE-2019-14039

2020-06-0215:15:00

CWE-125

[email protected]

web.nvd.nist.gov

cve-2019-14039

out of bound read

callback function

boundary check

snapdragon

nvd

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

9.3 High

AI Score

Confidence

High

3.6 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:N/A:P

0.0004 Low

EPSS

Percentile

11.8%

JSON

Out of bound read in adm call back function due to incorrect boundary check for payload in command response in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8053, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8953, QCS605, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM670, SDM710, SDM845, SDX20, SDX24

CPENameOperatorVersion
qualcomm:apq8053_firmwarequalcomm apq8053 firmwareeq-
qualcomm:apq8098_firmwarequalcomm apq8098 firmwareeq-
qualcomm:mdm9206_firmwarequalcomm mdm9206 firmwareeq-
qualcomm:mdm9207c_firmwarequalcomm mdm9207c firmwareeq-
qualcomm:mdm9607_firmwarequalcomm mdm9607 firmwareeq-
qualcomm:mdm9640_firmwarequalcomm mdm9640 firmwareeq-
qualcomm:mdm9650_firmwarequalcomm mdm9650 firmwareeq-
qualcomm:msm8905_firmwarequalcomm msm8905 firmwareeq-
qualcomm:msm8909w_firmwarequalcomm msm8909w firmwareeq-
qualcomm:msm8917_firmwarequalcomm msm8917 firmwareeq-

CPE	Name	Operator	Version
qualcomm:apq8053_firmware	qualcomm apq8053 firmware	eq	-
qualcomm:apq8098_firmware	qualcomm apq8098 firmware	eq	-
qualcomm:mdm9206_firmware	qualcomm mdm9206 firmware	eq	-
qualcomm:mdm9207c_firmware	qualcomm mdm9207c firmware	eq	-
qualcomm:mdm9607_firmware	qualcomm mdm9607 firmware	eq	-
qualcomm:mdm9640_firmware	qualcomm mdm9640 firmware	eq	-
qualcomm:mdm9650_firmware	qualcomm mdm9650 firmware	eq	-
qualcomm:msm8905_firmware	qualcomm msm8905 firmware	eq	-
qualcomm:msm8909w_firmware	qualcomm msm8909w firmware	eq	-
qualcomm:msm8917_firmware	qualcomm msm8917 firmware	eq	-

Rows per page:

1-10 of 221

References

www.qualcomm.com/company/product-security/bulletins/may-2020-bulletin

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

9.3 High

AI Score

Confidence

High

3.6 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:N/A:P

0.0004 Low

EPSS

Percentile

11.8%

JSON

Related for CVE-2019-14039

prion1 androidsecurity1