CVE-2019-14030
Summary
| CVE | CVE-2019-14030 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-03-05 09:15:00 UTC |
| Updated | 2020-03-05 19:37:00 UTC |
| Description | The size of a buffer is determined by addition and multiplications operations that have the potential to overflow due to lack of bound check in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9205, QCS404, Rennell, SC8180X, SDM845, SDM850, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130 |
Risk And Classification
Problem Types: CWE-120
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Qualcomm | Mdm9205 | - | All | All | All |
| Hardware | Qualcomm | Mdm9205 | - | All | All | All |
| Operating System | Qualcomm | Mdm9205 Firmware | - | All | All | All |
| Operating System | Qualcomm | Mdm9205 Firmware | - | All | All | All |
| Hardware | Qualcomm | Qcs404 | - | All | All | All |
| Hardware | Qualcomm | Qcs404 | - | All | All | All |
| Operating System | Qualcomm | Qcs404 Firmware | - | All | All | All |
| Operating System | Qualcomm | Qcs404 Firmware | - | All | All | All |
| Hardware | Qualcomm | Rennell | - | All | All | All |
| Hardware | Qualcomm | Rennell | - | All | All | All |
| Operating System | Qualcomm | Rennell Firmware | - | All | All | All |
| Operating System | Qualcomm | Rennell Firmware | - | All | All | All |
| Hardware | Qualcomm | Sc8180x | - | All | All | All |
| Hardware | Qualcomm | Sc8180x | - | All | All | All |
| Operating System | Qualcomm | Sc8180x Firmware | - | All | All | All |
| Operating System | Qualcomm | Sc8180x Firmware | - | All | All | All |
| Hardware | Qualcomm | Sdm845 | - | All | All | All |
| Hardware | Qualcomm | Sdm845 | - | All | All | All |
| Operating System | Qualcomm | Sdm845 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdm845 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sdm850 | - | All | All | All |
| Hardware | Qualcomm | Sdm850 | - | All | All | All |
| Operating System | Qualcomm | Sdm850 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdm850 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sdx55 | - | All | All | All |
| Hardware | Qualcomm | Sdx55 | - | All | All | All |
| Operating System | Qualcomm | Sdx55 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdx55 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sm6150 | - | All | All | All |
| Hardware | Qualcomm | Sm6150 | - | All | All | All |
| Operating System | Qualcomm | Sm6150 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sm6150 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sm7150 | - | All | All | All |
| Hardware | Qualcomm | Sm7150 | - | All | All | All |
| Operating System | Qualcomm | Sm7150 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sm7150 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sm8150 | - | All | All | All |
| Hardware | Qualcomm | Sm8150 | - | All | All | All |
| Operating System | Qualcomm | Sm8150 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sm8150 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sm8250 | - | All | All | All |
| Hardware | Qualcomm | Sm8250 | - | All | All | All |
| Operating System | Qualcomm | Sm8250 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sm8250 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sxr2130 | - | All | All | All |
| Hardware | Qualcomm | Sxr2130 | - | All | All | All |
| Operating System | Qualcomm | Sxr2130 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sxr2130 Firmware | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| March 2020 Security Bulletin | Qualcomm | CONFIRM | www.qualcomm.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.