CVE-2019-14020: Critical severity Google Android vulnerability
Multiple Read overflows issue due to improper length check while decoding dedicatedepsbearerreq/ actdefcontextreq/ csservnotification/ emminfo/ gutirealloccmd in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8053, APQ8076, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-14020?
CVE-2019-14020 is classified as a high-severity vulnerability due to potential exploitation leading to unauthorized access or compromise of systems.
How do I fix CVE-2019-14020?
To mitigate CVE-2019-14020, update your affected Qualcomm firmware or device software to the latest version provided by the vendor.
Which devices are affected by CVE-2019-14020?
CVE-2019-14020 affects various Qualcomm chipsets including APQ8053, APQ8076, APQ8096, and several MDM and MSM series firmware.
What type of vulnerability is CVE-2019-14020?
CVE-2019-14020 is a multiple read overflow vulnerability due to improper length checks in specific Qualcomm protocols.
Can CVE-2019-14020 be exploited remotely?
Yes, CVE-2019-14020 can potentially be exploited remotely by an attacker to execute arbitrary code or cause a denial of service.