CVE-2019-14048: High severity android vulnerability

Published Mar 2, 2020

Updated

Possible out of bound memory access while playing a crafted clip in media player in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in SM8150

Affected Software

3 affected components

Google Android

Qualcomm Sm8150 Firmware

Qualcomm SM8150

Event History

Mar 2, 2020

CVE Published

via Android·12:00 AM

Mar 5, 2020

CVE Published

via MITRE·08:56 AM

Data Sourced

via MITRE·08:56 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-14048?

CVE-2019-14048 is considered a high severity vulnerability due to the potential for out of bound memory access.

How do I fix CVE-2019-14048?

To fix CVE-2019-14048, ensure that your affected Snapdragon devices are updated with the latest firmware that addresses the vulnerability.

What products are affected by CVE-2019-14048?

CVE-2019-14048 affects Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IoT, Snapdragon Industrial IoT, Snapdragon Mobile, Snapdragon Voice & Music, and Snapdragon Wearables in the SM8150 configurations.

Can CVE-2019-14048 lead to system compromises?

Yes, CVE-2019-14048 can potentially lead to system compromises if exploited through crafted media clips.

Is there a workaround for CVE-2019-14048?

Currently, there are no known workarounds for CVE-2019-14048, so updating the affected devices is the recommended action.