CVE-2019-14073: Critical severity Google Android vulnerability
Copying RTCP messages into the output buffer without checking the destination buffer size which could lead to a remote stack overflow when processing large data or non-standard feedback messages in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8076, APQ8096, APQ8096AU, APQ8098, Kamorta, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, SA415M, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SM6150, SM7150, SM8150, SXR1130
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-14073?
CVE-2019-14073 is classified as a high-severity vulnerability due to the potential for a remote stack overflow.
How do I fix CVE-2019-14073?
Fixing CVE-2019-14073 involves updating affected Qualcomm firmware to the latest patched version.
What products are affected by CVE-2019-14073?
CVE-2019-14073 affects various Qualcomm products, including multiple Snapdragon and MDM firmware versions.
What type of vulnerability is CVE-2019-14073?
CVE-2019-14073 is a buffer overflow vulnerability resulting from improper handling of RTCP messages.
Can CVE-2019-14073 be exploited remotely?
Yes, CVE-2019-14073 can potentially be exploited remotely due to the nature of the vulnerability.