CVE-2019-14036: Out-of-bounds Read

Published Jan 6, 2020
·
Updated

Possible buffer overflow issue in error processing due to improper validation of array index value in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8064, APQ8096AU, IPQ4019, IPQ8064, IPQ8074, MDM9607, MDM9615, MDM9640, MSM8996AU, QCN7605

Affected Software

21 affected components
Google Android
Qualcomm Apq8064 Firmware
Qualcomm Apq8064
Qualcomm Apq8096au Firmware
Qualcomm APQ8096AU
Qualcomm Ipq4019 Firmware
Qualcomm IPQ4019
Qualcomm Ipq8064 Firmware
Qualcomm IPQ8064
Qualcomm Ipq8074 Firmware
Qualcomm IPQ8074
Qualcomm Mdm9607 Firmware
Qualcomm MDM9607
Qualcomm Mdm9615 Firmware
Qualcomm MDM9615
Qualcomm Mdm9640 Firmware
Qualcomm MDM9640
Qualcomm Msm8996au Firmware
Qualcomm MSM8996AU
Qualcomm Qcn7605 Firmware
Qualcomm Qcn7605

Event History

Jan 6, 2020
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityAffected Software
Jan 21, 2020
CVE Published
via MITRE·06:30 AM
Data Sourced
via MITRE·06:30 AM
DescriptionWeakness

Frequently Asked Questions

1

What is the severity of CVE-2019-14036?

CVE-2019-14036 has been classified with a medium severity level due to potential buffer overflow issues.

2

How do I fix CVE-2019-14036?

Fixing CVE-2019-14036 involves updating the affected Qualcomm firmware to the latest version released by Qualcomm.

3

What products are affected by CVE-2019-14036?

CVE-2019-14036 affects various Qualcomm Snapdragon products including automotive, consumer electronics, IoT, and mobile devices.

4

What type of vulnerability is CVE-2019-14036?

CVE-2019-14036 is a buffer overflow vulnerability related to improper validation of array index values.

5

Can CVE-2019-14036 be exploited remotely?

Yes, CVE-2019-14036 can potentially be exploited remotely depending on the context of use in the affected devices.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203