CVE-2019-14023: Input Validation
String format issue will occur while processing HLOS data as there is no user input validation to ensure inputs are properly NULL terminated before string copy in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9607, Nicobar, Rennell, SA6155P, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-14023?
CVE-2019-14023 has a moderate severity level due to a potential string format issue affecting multiple Qualcomm products.
How do I fix CVE-2019-14023?
To mitigate CVE-2019-14023, ensure that any affected firmware is updated to the latest security release provided by Qualcomm or the device manufacturer.
What products are affected by CVE-2019-14023?
CVE-2019-14023 impacts several Qualcomm firmware versions across different Snapdragon platforms including MDM9607 and Nicobar.
Is there any known exploit for CVE-2019-14023?
As of now, there are no public reports indicating any active exploitation of CVE-2019-14023.
What type of vulnerability is CVE-2019-14023?
CVE-2019-14023 is primarily a string format vulnerability caused by inadequate input validation in the processing of HLOS data.