CVE-2019-14077
EUVD-2019-533202.06.2020, 15:15
Out of bound memory access while processing ese transmit command due to passing Response buffer received from user in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8098, IPQ6018, Kamorta, MDM9150, MDM9205, MDM9607, MDM9650, MSM8909, MSM8998, Nicobar, QCS404, QCS405, QCS605, Rennell, SA415M, SA6155P, SC7180, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| qualcomm | apq8009_firmware | - |
| qualcomm | apq8098_firmware | - |
| qualcomm | ipq6018_firmware | - |
| qualcomm | kamorta_firmware | - |
| qualcomm | mdm9150_firmware | - |
| qualcomm | mdm9205_firmware | - |
| qualcomm | mdm9607_firmware | - |
| qualcomm | mdm9650_firmware | - |
| qualcomm | msm8909_firmware | - |
| qualcomm | msm8998_firmware | - |
| qualcomm | nicobar_firmware | - |
| qualcomm | qcs404_firmware | - |
| qualcomm | qcs405_firmware | - |
| qualcomm | qcs605_firmware | - |
| qualcomm | rennell_firmware | - |
| qualcomm | sa415m_firmware | - |
| qualcomm | sa6155p_firmware | - |
| qualcomm | sc7180_firmware | - |
| qualcomm | sc8180x_firmware | - |
| qualcomm | sda660_firmware | - |
| qualcomm | sda845_firmware | - |
| qualcomm | sdm630_firmware | - |
| qualcomm | sdm636_firmware | - |
| qualcomm | sdm660_firmware | - |
| qualcomm | sdm670_firmware | - |
| qualcomm | sdm710_firmware | - |
| qualcomm | sdm845_firmware | - |
| qualcomm | sdm850_firmware | - |
| qualcomm | sdx24_firmware | - |
| qualcomm | sdx55_firmware | - |
| qualcomm | sm6150_firmware | - |
| qualcomm | sm7150_firmware | - |
| qualcomm | sm8150_firmware | - |
| qualcomm | sm8250_firmware | - |
| qualcomm | sxr1130_firmware | - |
| qualcomm | sxr2130_firmware | - |
𝑥
= Vulnerable software versions
Common Weakness Enumeration