CVE-2019-14039
First published: Tue Jun 02 2020(Updated: )
Out of bound read in adm call back function due to incorrect boundary check for payload in command response in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8053, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8953, QCS605, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM670, SDM710, SDM845, SDX20, SDX24
Credit: product-security@qualcomm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Apq8098 | ||
| Qualcomm Mdm9206 Firmware | ||
| Qualcomm Mdm9206 | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Mdm9607 | ||
| Qualcomm Mdm9640 Firmware | ||
| Qualcomm Mdm9640 | ||
| Qualcomm Mdm9650 Firmware | ||
| Qualcomm Mdm9650 | ||
| Qualcomm Msm8905 Firmware | ||
| Qualcomm Msm8905 | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Msm8917 Firmware | ||
| Qualcomm Msm8917 | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Qcs605 Firmware | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Sda845 Firmware | ||
| Qualcomm Sda845 | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Sdm429w Firmware | ||
| Qualcomm Sdm429w | ||
| Qualcomm Sdm439 Firmware | ||
| Qualcomm Sdm439 | ||
| Qualcomm Sdm670 Firmware | ||
| Qualcomm Sdm670 | ||
| Qualcomm Sdm710 Firmware | ||
| Qualcomm Sdm710 | ||
| Qualcomm Sdm845 Firmware | ||
| Qualcomm Sdm845 | ||
| Google Android | ||
| Qualcomm Sdx20 | ||
| Qualcomm Sdx24 Firmware | ||
| Google Android |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2019-14039?
CVE-2019-14039 is a vulnerability caused by an out-of-bound read in the adm callback function due to incorrect boundary checks for payload in command response in multiple Qualcomm products.
Which Qualcomm products are affected by CVE-2019-14039?
CVE-2019-14039 affects Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, and Snapdragon Wearables in various models.
What is the severity of CVE-2019-14039?
CVE-2019-14039 has a severity score of 7.1 (high).
How does CVE-2019-14039 occur?
CVE-2019-14039 occurs due to incorrect boundary checks for payload in command response, leading to an out-of-bound read in the adm callback function.
Is there a fix available for CVE-2019-14039?
For information on fixes and mitigations for CVE-2019-14039, refer to the official Qualcomm product security bulletin.
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/tags
- agent/type
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- agent/remedy
- vendor/qualcomm
- canonical/google android
- canonical/qualcomm apq8098
- canonical/qualcomm mdm9206 firmware
- canonical/qualcomm mdm9206
- canonical/qualcomm mdm9607
- canonical/qualcomm mdm9640 firmware
- canonical/qualcomm mdm9640
- canonical/qualcomm mdm9650 firmware
- canonical/qualcomm mdm9650
- canonical/qualcomm msm8905 firmware
- canonical/qualcomm msm8905
- canonical/qualcomm msm8917 firmware
- canonical/qualcomm msm8917
- canonical/qualcomm qcs605 firmware
- canonical/qualcomm sda845 firmware
- canonical/qualcomm sda845
- canonical/qualcomm sdm429w firmware
- canonical/qualcomm sdm429w
- canonical/qualcomm sdm439 firmware
- canonical/qualcomm sdm439
- canonical/qualcomm sdm670 firmware
- canonical/qualcomm sdm670
- canonical/qualcomm sdm710 firmware
- canonical/qualcomm sdm710
- canonical/qualcomm sdm845 firmware
- canonical/qualcomm sdm845
- canonical/qualcomm sdx20
- canonical/qualcomm sdx24 firmware