CVE-2019-14062: Buffer Overflow
Buffer overflows while decoding setup message from Network due to lack of check of IE message length received from network in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8076, APQ8096, APQ8096AU, APQ8098, Kamorta, MDM9150, MDM9205, MDM9206, MDM9207C, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, SA415M, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SM6150, SM7150, SM8150, SXR1130
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-14062?
CVE-2019-14062 is classified as a high severity vulnerability due to potential exploitation leading to buffer overflow conditions.
How do I fix CVE-2019-14062?
To fix CVE-2019-14062, it is essential to update the affected Qualcomm firmware and apply any relevant security patches provided by the vendor.
What systems are affected by CVE-2019-14062?
CVE-2019-14062 affects various Qualcomm Snapdragon products including automotive, compute, and mobile devices.
Can CVE-2019-14062 be remotely exploited?
Yes, CVE-2019-14062 has the potential for remote exploitation due to its nature of processing messages from a network.
What are the consequences of CVE-2019-14062?
The consequences of CVE-2019-14062 may include unauthorized access, system crashes, and arbitrary code execution on affected devices.