CVE-2019-14027

EPSS 0.2%
Veröffentlicht 05.03.2020 09:15:16
Zuletzt bearbeitet 21.11.2024 04:25:55
Erkennungen
Login

Buffer overflow due to lack of upper bound check on channel length which is used for a loop. in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in APQ8098, IPQ6018, IPQ8074, MSM8998, Nicobar, QCA8081, QCN7605, QCS404, QCS605, Rennell, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SXR1130, SXR2130

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 25 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Qualcomm ≫ Apq8098 Firmware Version -

Qualcomm ≫ Apq8098 Version -

Qualcomm ≫ Ipq6018 Firmware Version -

Qualcomm ≫ Ipq6018 Version -

Qualcomm ≫ Ipq8074 Firmware Version -

Qualcomm ≫ Ipq8074 Version -

Qualcomm ≫ Msm8998 Firmware Version -

Qualcomm ≫ Msm8998 Version -

Qualcomm ≫ Nicobar Firmware Version -

Qualcomm ≫ Nicobar Version -

Qualcomm ≫ Qca8081 Firmware Version -

Qualcomm ≫ Qca8081 Version -

Qualcomm ≫ Qcn7605 Firmware Version -

Qualcomm ≫ Qcn7605 Version -

Qualcomm ≫ Qcs404 Firmware Version -

Qualcomm ≫ Qcs404 Version -

Qualcomm ≫ Qcs605 Firmware Version -

Qualcomm ≫ Qcs605 Version -

Qualcomm ≫ Rennell Firmware Version -

Qualcomm ≫ Rennell Version -

Qualcomm ≫ Sc8180x Firmware Version -

Qualcomm ≫ Sc8180x Version -

Qualcomm ≫ Sda660 Firmware Version -

Qualcomm ≫ Sda660 Version -

Qualcomm ≫ Sda845 Firmware Version -

Qualcomm ≫ Sda845 Version -

Qualcomm ≫ Sdm630 Firmware Version -

Qualcomm ≫ Sdm630 Version -

Qualcomm ≫ Sdm636 Firmware Version -

Qualcomm ≫ Sdm636 Version -

Qualcomm ≫ Sdm660 Firmware Version -

Qualcomm ≫ Sdm660 Version -

Qualcomm ≫ Sdm670 Firmware Version -

Qualcomm ≫ Sdm670 Version -

Qualcomm ≫ Sdm710 Firmware Version -

Qualcomm ≫ Sdm710 Version -

Qualcomm ≫ Sdm845 Firmware Version -

Qualcomm ≫ Sdm845 Version -

Qualcomm ≫ Sdm850 Firmware Version -

Qualcomm ≫ Sdm850 Version -

Qualcomm ≫ Sm6150 Firmware Version -

Qualcomm ≫ Sm6150 Version -

Qualcomm ≫ Sm7150 Firmware Version -

Qualcomm ≫ Sm7150 Version -

Qualcomm ≫ Sm8150 Firmware Version -

Qualcomm ≫ Sm8150 Version -

Qualcomm ≫ Sxr1130 Firmware Version -

Qualcomm ≫ Sxr1130 Version -

Qualcomm ≫ Sxr2130 Firmware Version -

Qualcomm ≫ Sxr2130 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.2%	0.1

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

https://www.qualcomm.com/company/product-security/bulletins/march-2020-bulletin

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2019-14027

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2019-14027

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2019-14027

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2019-14027