CVE-2019-14095: Buffer Overflow
Buffer overflow occurs while processing LMP packet in which name length parameter exceeds value specified in BT-specification in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8016, APQ8017, APQ8053, APQ8076, APQ8096, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA6174A, QCA6390, QCA6574AU, QCA9377, QCA9379, QCA9886, QCM2150, QCN7605, QCS404, QCS405, QCS605, QM215, Rennell, SA6155P, Saipan, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-14095?
CVE-2019-14095 has been classified as critical due to the potential for remote code execution caused by a buffer overflow.
How do I fix CVE-2019-14095?
To fix CVE-2019-14095, ensure that you apply the latest firmware updates provided by Qualcomm or your device manufacturer.
Which devices are affected by CVE-2019-14095?
CVE-2019-14095 affects various Qualcomm chipsets, including APQ8009, APQ8016, APQ8017, and others.
What impact does CVE-2019-14095 have on affected devices?
CVE-2019-14095 can allow attackers to execute arbitrary code on affected devices, potentially compromising the device's security.
Is CVE-2019-14095 exploitable remotely?
Yes, CVE-2019-14095 can be exploited remotely through malicious LMP packets.