10

CVE-2019-14097

Possible buffer overflow in WLAN Parser due to lack of length check when copying data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8096, APQ8096AU, APQ8098, IPQ6018, IPQ8074, MDM9607, MDM9640, MDM9650, MSM8996AU, MSM8998, Nicobar, QCA6174A, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA8081, QCA9377, QCA9379, QCN7605, QCS405, QCS605, Rennell, SA6155P, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Data is provided by the National Vulnerability Database (NVD)
Qualcomm ≫ Apq8096 Firmware Version-
   Qualcomm ≫ Apq8096 Version-
Qualcomm ≫ Apq8096au Firmware Version-
   Qualcomm ≫ Apq8096au Version-
Qualcomm ≫ Apq8098 Firmware Version-
   Qualcomm ≫ Apq8098 Version-
Qualcomm ≫ Ipq6018 Firmware Version-
   Qualcomm ≫ Ipq6018 Version-
Qualcomm ≫ Ipq8074 Firmware Version-
   Qualcomm ≫ Ipq8074 Version-
Qualcomm ≫ Mdm9607 Firmware Version-
   Qualcomm ≫ Mdm9607 Version-
Qualcomm ≫ Mdm9640 Firmware Version-
   Qualcomm ≫ Mdm9640 Version-
Qualcomm ≫ Mdm9650 Firmware Version-
   Qualcomm ≫ Mdm9650 Version-
Qualcomm ≫ Msm8996au Firmware Version-
   Qualcomm ≫ Msm8996au Version-
Qualcomm ≫ Msm8998 Firmware Version-
   Qualcomm ≫ Msm8998 Version-
Qualcomm ≫ Nicobar Firmware Version-
   Qualcomm ≫ Nicobar Version-
Qualcomm ≫ Qca6174a Firmware Version-
   Qualcomm ≫ Qca6174a Version-
Qualcomm ≫ Qca6574 Firmware Version-
   Qualcomm ≫ Qca6574 Version-
Qualcomm ≫ Qca6574au Firmware Version-
   Qualcomm ≫ Qca6574au Version-
Qualcomm ≫ Qca6584 Firmware Version-
   Qualcomm ≫ Qca6584 Version-
Qualcomm ≫ Qca6584au Firmware Version-
   Qualcomm ≫ Qca6584au Version-
Qualcomm ≫ Qca8081 Firmware Version-
   Qualcomm ≫ Qca8081 Version-
Qualcomm ≫ Qca9377 Firmware Version-
   Qualcomm ≫ Qca9377 Version-
Qualcomm ≫ Qca9379 Firmware Version-
   Qualcomm ≫ Qca9379 Version-
Qualcomm ≫ Qcn7605 Firmware Version-
   Qualcomm ≫ Qcn7605 Version-
Qualcomm ≫ Qcs405 Firmware Version-
   Qualcomm ≫ Qcs405 Version-
Qualcomm ≫ Qcs605 Firmware Version-
   Qualcomm ≫ Qcs605 Version-
Qualcomm ≫ Rennell Firmware Version-
   Qualcomm ≫ Rennell Version-
Qualcomm ≫ Sa6155p Firmware Version-
   Qualcomm ≫ Sa6155p Version-
Qualcomm ≫ Sc8180x Firmware Version-
   Qualcomm ≫ Sc8180x Version-
Qualcomm ≫ Sda660 Firmware Version-
   Qualcomm ≫ Sda660 Version-
Qualcomm ≫ Sda845 Firmware Version-
   Qualcomm ≫ Sda845 Version-
Qualcomm ≫ Sdm630 Firmware Version-
   Qualcomm ≫ Sdm630 Version-
Qualcomm ≫ Sdm636 Firmware Version-
   Qualcomm ≫ Sdm636 Version-
Qualcomm ≫ Sdm660 Firmware Version-
   Qualcomm ≫ Sdm660 Version-
Qualcomm ≫ Sdm670 Firmware Version-
   Qualcomm ≫ Sdm670 Version-
Qualcomm ≫ Sdm710 Firmware Version-
   Qualcomm ≫ Sdm710 Version-
Qualcomm ≫ Sdm845 Firmware Version-
   Qualcomm ≫ Sdm845 Version-
Qualcomm ≫ Sdm850 Firmware Version-
   Qualcomm ≫ Sdm850 Version-
Qualcomm ≫ Sm6150 Firmware Version-
   Qualcomm ≫ Sm6150 Version-
Qualcomm ≫ Sm7150 Firmware Version-
   Qualcomm ≫ Sm7150 Version-
Qualcomm ≫ Sm8150 Firmware Version-
   Qualcomm ≫ Sm8150 Version-
Qualcomm ≫ Sm8250 Firmware Version-
   Qualcomm ≫ Sm8250 Version-
Qualcomm ≫ Sxr1130 Firmware Version-
   Qualcomm ≫ Sxr1130 Version-
Qualcomm ≫ Sxr2130 Firmware Version-
   Qualcomm ≫ Sxr2130 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.36% 0.549
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.