CVE-2019-14130

Memory corruption can occurs in trusted application if offset size from HLOS is more than actual mapped buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Kamorta, QCS404, Rennell, SC7180, SDX55, SM6150, SM7150, SM8250, SXR2130

Score

CVSS 3.1 7.8 High

Status

Modified - product-security@qualcomm.com

Published

2020-07-30

Last modified

2024-08-05

Weaknesses

CWE-119, CWE-787

Affected products

• Kamorta Firmware (Qualcomm)
• Qcs404 Firmware (Qualcomm)
• Rennell Firmware (Qualcomm)
• Sc7180 Firmware (Qualcomm)
• Sdx55 Firmware (Qualcomm)
• Sm6150 Firmware (Qualcomm)
• Sm7150 Firmware (Qualcomm)
• Sm8250 Firmware (Qualcomm)
• Sxr2130 Firmware (Qualcomm)
• Snapdragon Auto (Qualcomm Inc.)
• Snapdragon Compute (Qualcomm Inc.)
• Snapdragon Mobile (Qualcomm Inc.)
• Snapdragon Wired Infrastructure And Networking (Qualcomm Inc.)

References

• https://www.qualcomm.com/company/product-security/bulletins/july-2020-bulletin
• https://www.qualcomm.com/company/product-security/bulletins/july-2020-security-bulletin