CVE-2019-14014: Buffer Overflow
First published: Mon Jan 06 2020(Updated: )
Possible buffer overflow when byte array receives incorrect input from reading source as array is not null terminated in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in Nicobar, SDM670, SDM710, SDM845, SM6150, SM8150, SM8250, SXR2130
Credit: product-security@qualcomm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Android | ||
| Qualcomm Nicobar | ||
| Qualcomm Nicobar | ||
| Qualcomm SD 670 Firmware | ||
| Qualcomm SDM670 Firmware | ||
| Qualcomm SD 710 Firmware | ||
| Qualcomm Snapdragon 710 | ||
| Qualcomm SDA/SDM845 Firmware | ||
| Qualcomm Snapdragon 845 | ||
| Qualcomm SM6150P firmware | ||
| Qualcomm SM6150P | ||
| Qualcomm SM8150P Firmware | ||
| Qualcomm SM8150 Fusion | ||
| Qualcomm SM8250 | ||
| qualcomm SM8250 firmware | ||
| Qualcomm SXR2130P Firmware | ||
| Qualcomm SXR2130 Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2019-14014?
CVE-2019-14014 is categorized as a high severity vulnerability due to the potential for buffer overflow.
How do I fix CVE-2019-14014?
To mitigate CVE-2019-14014, affected devices should be updated with the latest firmware provided by Qualcomm.
Which devices are affected by CVE-2019-14014?
CVE-2019-14014 affects various Qualcomm Snapdragon products including SDM670, SDM710, SDM845, SM6150, SM8150, SM8250, and SXR2130.
What causes CVE-2019-14014?
CVE-2019-14014 can occur when a byte array does not receive null-terminated input, potentially leading to a buffer overflow.
Is CVE-2019-14014 remotely exploitable?
Yes, if exploited, CVE-2019-14014 could allow an attacker to execute arbitrary code remotely.
- agent/type
- agent/first-publish-date
- agent/author
- agent/severity
- agent/weakness
- agent/references
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/source
- collector/android-source
- source/Android
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- vendor/google
- canonical/android
- vendor/qualcomm
- canonical/qualcomm nicobar
- canonical/qualcomm sd 670 firmware
- canonical/qualcomm sdm670 firmware
- canonical/qualcomm sd 710 firmware
- canonical/qualcomm snapdragon 710
- canonical/qualcomm sda/sdm845 firmware
- canonical/qualcomm snapdragon 845
- canonical/qualcomm sm6150p firmware
- canonical/qualcomm sm6150p
- canonical/qualcomm sm8150p firmware
- canonical/qualcomm sm8150 fusion
- canonical/qualcomm sm8250
- canonical/qualcomm sm8250 firmware
- canonical/qualcomm sxr2130p firmware
- canonical/qualcomm sxr2130 firmware