First published: Mon Mar 02 2020(Updated: )
Buffer overflow can occur while parsing RSN IE containing list of PMK ID`s which are more than the buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096, APQ8096AU, APQ8098, IPQ6018, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA8081, QCA9377, QCA9379, QCA9886, QCN7605, QCS405, QCS605, SA6155P, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
Credit: product-security@qualcomm.com
Affected Software | Affected Version | How to fix |
---|---|---|
Google Android | ||
Qualcomm Apq8009 | ||
Google Android | ||
Qualcomm Apq8017 | ||
Qualcomm Apq8053 Firmware | ||
Qualcomm Apq8053 | ||
Google Android | ||
Qualcomm Apq8064 | ||
Qualcomm Apq8096 Firmware | ||
Google Android | ||
Google Android | ||
Google Android | ||
Google Android | ||
Qualcomm Apq8098 | ||
Google Android | ||
Qualcomm Ipq6018 | ||
Qualcomm Ipq8074 Firmware | ||
Qualcomm Ipq8074 | ||
Qualcomm Mdm9206 Firmware | ||
Qualcomm Mdm9206 | ||
Google Android | ||
Google Android | ||
Google Android | ||
Qualcomm Mdm9607 | ||
Qualcomm Mdm9640 Firmware | ||
Qualcomm Mdm9640 | ||
Qualcomm Mdm9650 Firmware | ||
Qualcomm Mdm9650 | ||
Qualcomm Msm8996 Firmware | ||
Google Android | ||
Qualcomm Msm8996au Firmware | ||
Qualcomm Msm8996au | ||
Google Android | ||
Qualcomm MSM8998 | ||
Google Android | ||
Qualcomm Nicobar | ||
Qualcomm Qca4531 Firmware | ||
Qualcomm Qca4531 | ||
Google Android | ||
Google Android | ||
Google Android | ||
Qualcomm Qca6564 | ||
Qualcomm Qca6574 Firmware | ||
Qualcomm Qca6574 | ||
Google Android | ||
Qualcomm Qca6574au | ||
Qualcomm Qca6584 Firmware | ||
Qualcomm Qca6584 | ||
Google Android | ||
Qualcomm Qca6584au | ||
Qualcomm Qca8081 Firmware | ||
Google Android | ||
Google Android | ||
Google Android | ||
Google Android | ||
Google Android | ||
Qualcomm Qca9886 Firmware | ||
Qualcomm Qca9886 | ||
Google Android | ||
Google Android | ||
Qualcomm Qcs405 Firmware | ||
Qualcomm Qcs405 | ||
Qualcomm Qcs605 Firmware | ||
Google Android | ||
Google Android | ||
Qualcomm Sa6155p | ||
Qualcomm Sc8180x Firmware | ||
Qualcomm Sc8180x | ||
Google Android | ||
Google Android | ||
Qualcomm Sda845 Firmware | ||
Qualcomm Sda845 | ||
Qualcomm Sdm630 Firmware | ||
Qualcomm Sdm630 | ||
Google Android | ||
Qualcomm Sdm636 | ||
Qualcomm Sdm660 Firmware | ||
Qualcomm Sdm660 | ||
Qualcomm Sdm670 Firmware | ||
Qualcomm Sdm670 | ||
Qualcomm Sdm710 Firmware | ||
Qualcomm Sdm710 | ||
Qualcomm Sdm845 Firmware | ||
Qualcomm Sdm845 | ||
Qualcomm Sdm850 Firmware | ||
Qualcomm Sdm850 | ||
Qualcomm Sdx20 Firmware | ||
Qualcomm Sdx20 | ||
Qualcomm Sdx24 Firmware | ||
Google Android | ||
Qualcomm Sm6150 Firmware | ||
Qualcomm Sm6150 | ||
Qualcomm Sm7150 Firmware | ||
Qualcomm Sm7150 | ||
Qualcomm Sm8150 Firmware | ||
Qualcomm Sm8150 | ||
Qualcomm Sm8250 Firmware | ||
Qualcomm SM8250 | ||
Qualcomm Sxr1130 Firmware | ||
Qualcomm Sxr1130 | ||
Qualcomm Sxr2130 Firmware | ||
Qualcomm Sxr2130 | ||
Google Android |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-14031 is a vulnerability where a buffer overflow can occur while parsing RSN IE containing a list of PMK IDs which are more than the buffer size in Qualcomm Snapdragon devices.
CVE-2019-14031 has a severity rating of 9.8 (Critical).
To mitigate CVE-2019-14031, users should apply the patches provided by Qualcomm and Google for the affected Snapdragon devices.