Lucene search

[email protected]CVE-2019-14043

HistoryJun 02, 2020 - 3:15 p.m.

CVE-2019-14043

2020-06-0215:15:00

CWE-125

[email protected]

web.nvd.nist.gov

cve-2019-14043

out of bound read

fingerprint application

snapdragon

security vulnerability

nvd

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

9.2 High

AI Score

Confidence

High

3.6 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:N/A:P

0.0004 Low

EPSS

Percentile

11.8%

JSON

Out of bound read in Fingerprint application due to requested data is being used without length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in Kamorta, MDM9150, MDM9205, MDM9650, MSM8998, Nicobar, QCS404, QCS405, QCS605, Rennell, SA415M, SA6155P, SC7180, SC8180X, SDA660, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

CPENameOperatorVersion
qualcomm:kamorta_firmwarequalcomm kamorta firmwareeq-
qualcomm:mdm9150_firmwarequalcomm mdm9150 firmwareeq-
qualcomm:mdm9205_firmwarequalcomm mdm9205 firmwareeq-
qualcomm:mdm9650_firmwarequalcomm mdm9650 firmwareeq-
qualcomm:msm8998_firmwarequalcomm msm8998 firmwareeq-
qualcomm:nicobar_firmwarequalcomm nicobar firmwareeq-
qualcomm:qcs404_firmwarequalcomm qcs404 firmwareeq-
qualcomm:qcs405_firmwarequalcomm qcs405 firmwareeq-
qualcomm:qcs605_firmwarequalcomm qcs605 firmwareeq-
qualcomm:rennell_firmwarequalcomm rennell firmwareeq-

CPE	Name	Operator	Version
qualcomm:kamorta_firmware	qualcomm kamorta firmware	eq	-
qualcomm:mdm9150_firmware	qualcomm mdm9150 firmware	eq	-
qualcomm:mdm9205_firmware	qualcomm mdm9205 firmware	eq	-
qualcomm:mdm9650_firmware	qualcomm mdm9650 firmware	eq	-
qualcomm:msm8998_firmware	qualcomm msm8998 firmware	eq	-
qualcomm:nicobar_firmware	qualcomm nicobar firmware	eq	-
qualcomm:qcs404_firmware	qualcomm qcs404 firmware	eq	-
qualcomm:qcs405_firmware	qualcomm qcs405 firmware	eq	-
qualcomm:qcs605_firmware	qualcomm qcs605 firmware	eq	-
qualcomm:rennell_firmware	qualcomm rennell firmware	eq	-

Rows per page:

1-10 of 301

References

www.qualcomm.com/company/product-security/bulletins/may-2020-bulletin

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

9.2 High

AI Score

Confidence

High

3.6 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:N/A:P

0.0004 Low

EPSS

Percentile

11.8%

JSON

Related for CVE-2019-14043

prion1 androidsecurity1