7.8

CVE-2019-14023

EPSS 0.2%
Veröffentlicht 21.01.2020 07:15:12
Zuletzt bearbeitet 21.11.2024 04:25:55
Erkennungen
Login

String format issue will occur while processing HLOS data as there is no user input validation to ensure inputs are properly NULL terminated before string copy in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9607, Nicobar, Rennell, SA6155P, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 4

NVD 10 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Qualcomm ≫ Mdm9607 Firmware Version -

Qualcomm ≫ Mdm9607 Version -

Qualcomm ≫ Nicobar Firmware Version -

Qualcomm ≫ Nicobar Version -

Qualcomm ≫ Rennell Firmware Version -

Qualcomm ≫ Rennell Version -

Qualcomm ≫ Sa6155p Firmware Version -

Qualcomm ≫ Sa6155p Version -

Qualcomm ≫ Sdx55 Firmware Version -

Qualcomm ≫ Sdx55 Version -

Qualcomm ≫ Sm6150 Firmware Version -

Qualcomm ≫ Sm6150 Version -

Qualcomm ≫ Sm7150 Firmware Version -

Qualcomm ≫ Sm7150 Version -

Qualcomm ≫ Sm8150 Firmware Version -

Qualcomm ≫ Sm8150 Version -

Qualcomm ≫ Sm8250 Firmware Version -

Qualcomm ≫ Sm8250 Version -

Qualcomm ≫ Sxr2130 Firmware Version -

Qualcomm ≫ Sxr2130 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.2%	0.101

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

Es wurden noch keine Informationen zu CWE veröffentlicht.

https://www.qualcomm.com/company/product-security/bulletins/january-2020-bulletin

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2019-14023

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2019-14023

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2019-14023

EUVD