CVE-2019-14030

HIGH

Qualcomm Multiple Chipsets Firmware Buffer Overflow via Unchecked Buffer Size

Title source: llm
STIX 2.1

Description

The size of a buffer is determined by addition and multiplications operations that have the potential to overflow due to lack of bound check in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9205, QCS404, Rennell, SC8180X, SDM845, SDM850, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130

References (1)

Core 1
Core References

Scores

CVSS v3 7.8
EPSS 0.0020
EPSS Percentile 10.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-120
Status published
Products (12)
qualcomm/mdm9205_firmware
qualcomm/qcs404_firmware
qualcomm/rennell_firmware
qualcomm/sc8180x_firmware
qualcomm/sdm845_firmware
qualcomm/sdm850_firmware
qualcomm/sdx55_firmware
qualcomm/sm6150_firmware
qualcomm/sm7150_firmware
qualcomm/sm8150_firmware
... and 2 more
Published Mar 05, 2020
Tracked Since Feb 18, 2026