CVE-2019-14018: Out-of-bounds Read
Possible out of bound array access as there is no check on carrier index passed in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8053, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-14018?
The severity of CVE-2019-14018 is rated as 7.8 (High).
Which software products are affected by CVE-2019-14018?
Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8053, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9607, MDM9625, MDM9635M.
Is Qualcomm Mdm9206 vulnerable to CVE-2019-14018?
Yes, Qualcomm Mdm9206 firmware is vulnerable to CVE-2019-14018.
How can I mitigate the risk of CVE-2019-14018?
To mitigate CVE-2019-14018, apply the necessary security patches provided by the vendor.
Where can I find more information about CVE-2019-14018?
More information about CVE-2019-14018 can be found on the Qualcomm and Android security bulletin websites.