CVE-2019-14083
05.03.2020, 09:15
While parsing Service Descriptor Extended Attribute received as part of SDF frame, there is a possibility that incorrect length is specified in the attribute length field of extended SSI which can lead to integer underflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, APQ8096, APQ8098, IPQ6018, IPQ8074, MSM8996AU, MSM8998, Nicobar, QCA6174A, QCA6390, QCA6574AU, QCA8081, QCA9377, QCA9379, QCN7605, QCS404, QCS405, QCS605, Rennell, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SM6150, SM7150, SM8150, SXR1130, SXR2130
| Vendor | Product | Version |
|---|---|---|
| qualcomm | apq8009_firmware | - |
| qualcomm | apq8053_firmware | - |
| qualcomm | apq8096_firmware | - |
| qualcomm | apq8098_firmware | - |
| qualcomm | ipq6018_firmware | - |
| qualcomm | ipq8074_firmware | - |
| qualcomm | msm8996au_firmware | - |
| qualcomm | msm8998_firmware | - |
| qualcomm | nicobar_firmware | - |
| qualcomm | qca6174a_firmware | - |
| qualcomm | qca6390_firmware | - |
| qualcomm | qca6574au_firmware | - |
| qualcomm | qca8081_firmware | - |
| qualcomm | qca9377_firmware | - |
| qualcomm | qca9379_firmware | - |
| qualcomm | qcn7605_firmware | - |
| qualcomm | qcs404_firmware | - |
| qualcomm | qcs405_firmware | - |
| qualcomm | qcs605_firmware | - |
| qualcomm | rennell_firmware | - |
| qualcomm | sc8180x_firmware | - |
| qualcomm | sda660_firmware | - |
| qualcomm | sda845_firmware | - |
| qualcomm | sdm630_firmware | - |
| qualcomm | sdm636_firmware | - |
| qualcomm | sdm660_firmware | - |
| qualcomm | sdm670_firmware | - |
| qualcomm | sdm710_firmware | - |
| qualcomm | sdm845_firmware | - |
| qualcomm | sdm850_firmware | - |
| qualcomm | sdx20_firmware | - |
| qualcomm | sdx24_firmware | - |
| qualcomm | sm6150_firmware | - |
| qualcomm | sm7150_firmware | - |
| qualcomm | sm8150_firmware | - |
| qualcomm | sxr1130_firmware | - |
| qualcomm | sxr2130_firmware | - |
𝑥
= Vulnerable software versions
Common Weakness Enumeration