CVE-2019-14000

🗓️ 05 Mar 2020 08:56:10Reported by qualcommType

Lack of check for RX FIFO write index leads to memory corruption and info leakage in multiple Snapdragon platforms

Reporter	Title	Published	Views	Family All 6
Circl	CVE-2019-14000	20 Jan 202608:04	–	circl
CVE	CVE-2019-14000	5 Mar 202008:56	–	cve
EUVD	EUVD-2019-5258	7 Oct 202500:30	–	euvd
NVD	CVE-2019-14000	5 Mar 202009:15	–	nvd
Prion	Memory corruption	5 Mar 202009:15	–	prion
RedhatCVE	CVE-2019-14000	22 May 202510:32	–	redhatcve

[
  {
    "product": "Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, IPQ6018, IPQ8074, MDM9150, MDM9205, MDM9206, MDM9607, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA8081, QCM2150, QCS404, QCS405, QCS605, QM215, Rennell, SA6155P, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130"
      }
    ]
  }
]

Source	Link
qualcomm	www.qualcomm.com/company/product-security/bulletins/march-2020-bulletin

05 Mar 2020 08:56Current

7.8High risk

Vulners AI Score7.8

EPSS0.00202