Lucene search

[email protected]CVE-2019-14044

HistoryFeb 07, 2020 - 5:15 a.m.

CVE-2019-14044

2020-02-0705:15:00

CWE-908

CWE-129

[email protected]

web.nvd.nist.gov

cve-2019-14044

out of bound access

uninitialized memory

camera open close

snapdragon consumer iot

snapdragon mobile

qcs605

sdm439

sdm630

sdm636

sdm660

sdx24

nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

11.7%

JSON

Out of bound access due to access of uninitialized memory segment in an array of pointers while normal camera open close in Snapdragon Consumer IOT, Snapdragon Mobile in QCS605, SDM439, SDM630, SDM636, SDM660, SDX24

CPENameOperatorVersion
qualcomm:qcs605_firmwarequalcomm qcs605 firmwareeq-
qualcomm:sdm439_firmwarequalcomm sdm439 firmwareeq-
qualcomm:sdm630_firmwarequalcomm sdm630 firmwareeq-
qualcomm:sdm636_firmwarequalcomm sdm636 firmwareeq-
qualcomm:sdm660_firmwarequalcomm sdm660 firmwareeq-
qualcomm:sdx24_firmwarequalcomm sdx24 firmwareeq-

CPE	Name	Operator	Version
qualcomm:qcs605_firmware	qualcomm qcs605 firmware	eq	-
qualcomm:sdm439_firmware	qualcomm sdm439 firmware	eq	-
qualcomm:sdm630_firmware	qualcomm sdm630 firmware	eq	-
qualcomm:sdm636_firmware	qualcomm sdm636 firmware	eq	-
qualcomm:sdm660_firmware	qualcomm sdm660 firmware	eq	-
qualcomm:sdx24_firmware	qualcomm sdx24 firmware	eq	-

References

www.qualcomm.com/company/product-security/bulletins/february-2020-bulletin

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

11.7%

JSON

Related for CVE-2019-14044

prion1