CVE-2019-14094: Integer Overflow
Integer overflow in diag command handler when user inputs a large value for number of tasks field in the request packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, APQ8096AU, APQ8098, IPQ6018, IPQ8074, Kamorta, MDM9150, MDM9205, MDM9206, MDM9207C, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA8081, QCM2150, QCN7605, QCS404, QCS405, QCS605, QM215, Rennell, SA415M, Saipan, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-14094?
The severity of CVE-2019-14094 is classified as high due to the potential for integer overflow leading to denial of service.
How do I fix CVE-2019-14094?
To fix CVE-2019-14094, apply the appropriate firmware updates provided by Qualcomm for affected devices.
Which devices are affected by CVE-2019-14094?
CVE-2019-14094 affects various Qualcomm Snapdragon Auto and Compute components, including multiple firmware versions across models like APQ8009 and APQ8053.
What type of vulnerability is CVE-2019-14094?
CVE-2019-14094 is an integer overflow vulnerability in the diag command handler.
Can CVE-2019-14094 be exploited remotely?
Yes, CVE-2019-14094 can potentially be exploited remotely if an attacker can send crafted requests to the affected devices.