What is CVE-2019-14015?

CVE-2019-14015 is a stack-based buffer overflow vulnerability that exists in the initialization of the identification stage due to lack of check on the number of templates provided.

What software versions are affected by CVE-2019-14015?

CVE-2019-14015 affects Qualcomm Apq8096 Firmware, Qualcomm Apq8096au Firmware, Qualcomm Mdm9205 Firmware, and several other Qualcomm firmware versions.

What is the severity of CVE-2019-14015?

CVE-2019-14015 has a severity rating of 7.8, which is considered high.

How can I fix CVE-2019-14015?

To fix CVE-2019-14015, update your affected Qualcomm firmware versions to the latest available patches and versions.

Where can I find more information about CVE-2019-14015?

You can find more information about CVE-2019-14015 in the Android Security Bulletin for March 2020 and the Qualcomm Product Security Bulletins for March 2020.

Vulnerability/
CVE-2019-14015

high

7.8

CWE

787 119

2/3/2020

5/3/2020

26/8/2024

CVE-2019-14015: Buffer Overflow

First published: Mon Mar 02 2020(Updated: )

A stack-based buffer overflow exists in the initialization of the identification stage due to lack of check on the number of templates provided. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8096, APQ8096AU, MDM9205, MSM8996, MSM8996AU, Nicobar, QCS404, QCS405, QCS605, Rennell, SA6155P, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130, SXR2130

Credit: product-security@qualcomm.com

Affected Software	Affected Version	How to fix
qualcomm APQ8096 firmware
qualcomm APQ8096SG
Qualcomm apq8096au firmware
Qualcomm apq8096au
Qualcomm 9205 Firmware
Qualcomm 9205
qualcomm MSM8996AU firmware
Qualcomm Snapdragon 8996
Qualcomm MSM8996AU Firmware
Qualcomm MSM8996AU Firmware
qualcomm Nicobar firmware
qualcomm Nicobar
qualcomm QCS404 firmware
qualcomm QCS404
Qualcomm QCS405 Firmware
Qualcomm QCS405 Firmware
Qualcomm QCS605 firmware
Qualcomm QCS605
qualcomm Rennell firmware
qualcomm Rennell
Qualcomm Sa6155p Firmware
qualcomm SA6155P
qualcomm SC8180X firmware
qualcomm SC8180X
qualcomm SDA660 firmware
qualcomm SDA660
qualcomm sda845 firmware
qualcomm sda845
qualcomm SDM630 firmware
qualcomm SDM630
qualcomm SDM636 firmware
qualcomm SDM636
qualcomm SDM660 firmware
qualcomm SDM660
qualcomm sdm670 firmware
qualcomm sdm670
qualcomm sdm710 firmware
qualcomm sdm710
qualcomm SDM845 firmware
qualcomm SDM845
qualcomm sdm850 firmware
qualcomm sdm850
Qualcomm sdx24 firmware
Qualcomm sdx24
Qualcomm sdx55 firmware
Qualcomm sdx55
Qualcomm SM6150
Qualcomm SM6150 Firmware
Qualcomm SM7150 Firmware
qualcomm SM7150 firmware
qualcomm SM8150 firmware
qualcomm SM8150
Qualcomm SXR1130 Firmware
Qualcomm SXR1130
qualcomm SXR2130 firmware
qualcomm SXR2130
Android

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is CVE-2019-14015?
CVE-2019-14015 is a stack-based buffer overflow vulnerability that exists in the initialization of the identification stage due to lack of check on the number of templates provided.
What software versions are affected by CVE-2019-14015?
CVE-2019-14015 affects Qualcomm Apq8096 Firmware, Qualcomm Apq8096au Firmware, Qualcomm Mdm9205 Firmware, and several other Qualcomm firmware versions.
What is the severity of CVE-2019-14015?
CVE-2019-14015 has a severity rating of 7.8, which is considered high.
How can I fix CVE-2019-14015?
To fix CVE-2019-14015, update your affected Qualcomm firmware versions to the latest available patches and versions.
Where can I find more information about CVE-2019-14015?
You can find more information about CVE-2019-14015 in the Android Security Bulletin for March 2020 and the Qualcomm Product Security Bulletins for March 2020.