CVE-2019-14111

Possible buffer overflow while handling NAN reception of NMF in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ6018, IPQ8074, Nicobar, QCA6390, QCA8081, QCN7605, QCS404, QCS405, Rennell, SC7180, SC8180X, SM6150, SM7150, SM8150, SXR2130

Score

CVSS 3.1 9.8 Critical

Status

Modified - product-security@qualcomm.com

Published

2020-04-16

Last modified

2024-08-05

Weaknesses

CWE-120

Affected products

• Ipq6018 Firmware (Qualcomm)
• Ipq8074 Firmware (Qualcomm)
• Nicobar Firmware (Qualcomm)
• Qca6390 Firmware (Qualcomm)
• Qca8081 Firmware (Qualcomm)
• Qcn7605 Firmware (Qualcomm)
• Qcs404 Firmware (Qualcomm)
• Qcs405 Firmware (Qualcomm)
• Rennell Firmware (Qualcomm)
• Sc7180 Firmware (Qualcomm)
• Sc8180x Firmware (Qualcomm)
• Sm6150 Firmware (Qualcomm)
• Sm7150 Firmware (Qualcomm)
• Sm8150 Firmware (Qualcomm)
• Sxr2130 Firmware (Qualcomm)
• Snapdragon Auto (Qualcomm Inc.)
• Snapdragon Compute (Qualcomm Inc.)
• Snapdragon Connectivity (Qualcomm Inc.)
• Snapdragon Consumer Electronics Connectivity (Qualcomm Inc.)
• Snapdragon Mobile (Qualcomm Inc.)
• Snapdragon Voice Music (Qualcomm Inc.)
• Snapdragon Wired Infrastructure And Networking (Qualcomm Inc.)

References

• https://www.qualcomm.com/company/product-security/bulletins/april-2020-bulletin