CVE-2019-14009
Summary
| CVE | CVE-2019-14009 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-04-16 11:15:00 UTC |
| Updated | 2020-04-22 14:17:00 UTC |
| Description | Out of bound memory access while processing TZ command handler due to improper input validation on response length received from user in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8098, MDM9150, MDM9607, MDM9650, MSM8905, MSM8909, MSM8998, SDA660, SDA845, SDM630, SDM636, SDM660, SDM845, SDM850, SXR2130 |
Risk And Classification
Problem Types: CWE-119
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Qualcomm | Apq8009 | - | All | All | All |
| Hardware | Qualcomm | Apq8009 | - | All | All | All |
| Operating System | Qualcomm | Apq8009 Firmware | - | All | All | All |
| Operating System | Qualcomm | Apq8009 Firmware | - | All | All | All |
| Hardware | Qualcomm | Apq8098 | - | All | All | All |
| Hardware | Qualcomm | Apq8098 | - | All | All | All |
| Operating System | Qualcomm | Apq8098 Firmware | - | All | All | All |
| Operating System | Qualcomm | Apq8098 Firmware | - | All | All | All |
| Hardware | Qualcomm | Mdm9150 | - | All | All | All |
| Hardware | Qualcomm | Mdm9150 | - | All | All | All |
| Operating System | Qualcomm | Mdm9150 Firmware | - | All | All | All |
| Operating System | Qualcomm | Mdm9150 Firmware | - | All | All | All |
| Hardware | Qualcomm | Mdm9607 | - | All | All | All |
| Hardware | Qualcomm | Mdm9607 | - | All | All | All |
| Operating System | Qualcomm | Mdm9607 Firmware | - | All | All | All |
| Operating System | Qualcomm | Mdm9607 Firmware | - | All | All | All |
| Hardware | Qualcomm | Mdm9650 | - | All | All | All |
| Hardware | Qualcomm | Mdm9650 | - | All | All | All |
| Operating System | Qualcomm | Mdm9650 Firmware | - | All | All | All |
| Operating System | Qualcomm | Mdm9650 Firmware | - | All | All | All |
| Hardware | Qualcomm | Msm8905 | - | All | All | All |
| Hardware | Qualcomm | Msm8905 | - | All | All | All |
| Operating System | Qualcomm | Msm8905 Firmware | - | All | All | All |
| Operating System | Qualcomm | Msm8905 Firmware | - | All | All | All |
| Hardware | Qualcomm | Msm8909 | - | All | All | All |
| Hardware | Qualcomm | Msm8909 | - | All | All | All |
| Operating System | Qualcomm | Msm8909 Firmware | - | All | All | All |
| Operating System | Qualcomm | Msm8909 Firmware | - | All | All | All |
| Hardware | Qualcomm | Msm8998 | - | All | All | All |
| Hardware | Qualcomm | Msm8998 | - | All | All | All |
| Operating System | Qualcomm | Msm8998 Firmware | - | All | All | All |
| Operating System | Qualcomm | Msm8998 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sda660 | - | All | All | All |
| Hardware | Qualcomm | Sda660 | - | All | All | All |
| Operating System | Qualcomm | Sda660 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sda660 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sda845 | - | All | All | All |
| Hardware | Qualcomm | Sda845 | - | All | All | All |
| Operating System | Qualcomm | Sda845 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sda845 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sdm630 | - | All | All | All |
| Hardware | Qualcomm | Sdm630 | - | All | All | All |
| Operating System | Qualcomm | Sdm630 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdm630 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sdm636 | - | All | All | All |
| Hardware | Qualcomm | Sdm636 | - | All | All | All |
| Operating System | Qualcomm | Sdm636 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdm636 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sdm660 | - | All | All | All |
| Hardware | Qualcomm | Sdm660 | - | All | All | All |
| Operating System | Qualcomm | Sdm660 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdm660 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sdm845 | - | All | All | All |
| Hardware | Qualcomm | Sdm845 | - | All | All | All |
| Operating System | Qualcomm | Sdm845 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdm845 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sdm850 | - | All | All | All |
| Hardware | Qualcomm | Sdm850 | - | All | All | All |
| Operating System | Qualcomm | Sdm850 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdm850 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sxr2130 | - | All | All | All |
| Hardware | Qualcomm | Sxr2130 | - | All | All | All |
| Operating System | Qualcomm | Sxr2130 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sxr2130 Firmware | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| April 2020 Bulletin | Qualcomm | CONFIRM | www.qualcomm.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.