CVE-2019-14119

HIGH

Snapdragon Auto Snapdragon Compute Snapdragon Connectivity Snapdrag...

Title source: llm
STIX 2.1

Description

u'While processing SMCInvoke asynchronous message header, message count is modified leading to a TOCTOU race condition and lead to memory corruption' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ6018, Kamorta, MDM9205, MDM9607, Nicobar, QCS404, QCS405, QCS605, QCS610, Rennell, SA415M, SA515M, SA6155P, SC7180, SC8180X, SDM670, SDM710, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

References (2)

Core 2

Scores

CVSS v3 7.0
EPSS 0.0003
EPSS Percentile 9.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-367 CWE-787
Status published
Products (25)
qualcomm/ipq6018_firmware
qualcomm/kamorta_firmware
qualcomm/mdm9205_firmware
qualcomm/mdm9607_firmware
qualcomm/nicobar_firmware
qualcomm/qcs404_firmware
qualcomm/qcs405_firmware
qualcomm/qcs605_firmware
qualcomm/qcs610_firmware
qualcomm/rennell_firmware
... and 15 more
Published Sep 08, 2020
Tracked Since Feb 18, 2026