CVE-2019-14068
First published: Mon Mar 02 2020(Updated: )
Out of bound access in msm routing due to lack of check of size before accessing in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, APQ8096AU, MDM9607, MSM8905, MSM8909W, Nicobar, QCS405, QCS605, Rennell, Saipan, SDM429W, SDM845, SDX20, SDX24, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
Credit: product-security@qualcomm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Android | ||
| Qualcomm APQ8009W Firmware | ||
| Qualcomm APQ8009 Firmware | ||
| Qualcomm APQ8053 | ||
| Qualcomm APQ8053 Firmware | ||
| Qualcomm APQ8096AU Firmware | ||
| Qualcomm APQ8096AU Firmware | ||
| Qualcomm MD9607 Firmware | ||
| Qualcomm MDM9607 firmware | ||
| Qualcomm 8905 Firmware | ||
| Qualcomm 8905 | ||
| Qualcomm 8909 Firmware | ||
| Qualcomm Snapdragon 8909 | ||
| Qualcomm Nicobar | ||
| Qualcomm Nicobar | ||
| Qualcomm QCS405 Firmware | ||
| Qualcomm QCS405 Firmware | ||
| Qualcomm QCS605 | ||
| Qualcomm QCS605 Firmware | ||
| Qualcomm Rennell Firmware | ||
| Qualcomm Rennell Firmware | ||
| Qualcomm Saipan Firmware | ||
| Qualcomm Saipan Firmware | ||
| Qualcomm SDM429W | ||
| qualcomm SDM429W firmware | ||
| Qualcomm SDA/SDM845 Firmware | ||
| Qualcomm Snapdragon 845 | ||
| Qualcomm SDX20 Firmware | ||
| Qualcomm SDX20 Firmware | ||
| Qualcomm SDX24 | ||
| Qualcomm SDX24 | ||
| Qualcomm SM6150P firmware | ||
| Qualcomm SM6150P | ||
| qualcomm SM7150P firmware | ||
| qualcomm SM7150 firmware | ||
| Qualcomm SM8150P Firmware | ||
| Qualcomm SM8150 Fusion | ||
| Qualcomm SM8250 | ||
| qualcomm SM8250 firmware | ||
| Qualcomm SXR1130 | ||
| Qualcomm SXR1130 Firmware | ||
| Qualcomm SXR2130P Firmware | ||
| Qualcomm SXR2130 Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://source.codeaurora.org/quic/la/platform/vendor/opensource/audio-kernel/commit/?id=0274b6d95e23a112fc75ca44f0634632885852fc
- https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=66b26c141c4ecaa3c4e0d4dba53a4421550a329c
- https://source.android.com/docs/security/bulletin/2020-03-01 (Advisory)
- https://www.qualcomm.com/company/product-security/bulletins/march-2020-bulletin
Frequently Asked Questions
What is the severity of CVE-2019-14068?
CVE-2019-14068 is classified as a high severity vulnerability due to potential exploitation leading to out-of-bounds access.
How do I fix CVE-2019-14068?
To fix CVE-2019-14068, update your device firmware to the latest version provided by your vendor.
Which devices are affected by CVE-2019-14068?
CVE-2019-14068 affects various Qualcomm Snapdragon chipsets including APQ8009, APQ8053, APQ8096AU, and others.
Can CVE-2019-14068 lead to data breaches?
Yes, the out-of-bounds access vulnerability in CVE-2019-14068 can potentially be exploited to access sensitive data.
Is there a specific software version that mitigates CVE-2019-14068?
Mitigation for CVE-2019-14068 is implemented in specific firmware updates released by Qualcomm and device manufacturers.
- agent/type
- agent/first-publish-date
- agent/author
- agent/severity
- agent/weakness
- agent/remedy
- agent/references
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/event
- agent/last-modified-date
- agent/source
- collector/android-source
- source/Android
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- vendor/google
- canonical/android
- vendor/qualcomm
- canonical/qualcomm apq8009w firmware
- canonical/qualcomm apq8009 firmware
- canonical/qualcomm apq8053
- canonical/qualcomm apq8053 firmware
- canonical/qualcomm apq8096au firmware
- canonical/qualcomm md9607 firmware
- canonical/qualcomm mdm9607 firmware
- canonical/qualcomm 8905 firmware
- canonical/qualcomm 8905
- canonical/qualcomm 8909 firmware
- canonical/qualcomm snapdragon 8909
- canonical/qualcomm nicobar
- canonical/qualcomm qcs405 firmware
- canonical/qualcomm qcs605
- canonical/qualcomm qcs605 firmware
- canonical/qualcomm rennell firmware
- canonical/qualcomm saipan firmware
- canonical/qualcomm sdm429w
- canonical/qualcomm sdm429w firmware
- canonical/qualcomm sda/sdm845 firmware
- canonical/qualcomm snapdragon 845
- canonical/qualcomm sdx20 firmware
- canonical/qualcomm sdx24
- canonical/qualcomm sm6150p firmware
- canonical/qualcomm sm6150p
- canonical/qualcomm sm7150p firmware
- canonical/qualcomm sm7150 firmware
- canonical/qualcomm sm8150p firmware
- canonical/qualcomm sm8150 fusion
- canonical/qualcomm sm8250
- canonical/qualcomm sm8250 firmware
- canonical/qualcomm sxr1130
- canonical/qualcomm sxr1130 firmware
- canonical/qualcomm sxr2130p firmware
- canonical/qualcomm sxr2130 firmware