Vulnetix
Try Vulnetix Request Demo
CVE-2019-14003 PUBLISHED CVSS 7.5 HIGH

Null pointer exception can happen while parsing invalid MKV clip where cue information is parsed before segment information in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCS605, QM215, Rennell, SA6155P, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

EPSS 0.37% · 58.6th percentile

Risk Scores

CVSS v3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.37%
58.6th percentile

Affected Products

VendorProductVersions
qualcommmsm8996_firmware
qualcommnicobar_firmware
qualcommsdm845_firmware
qualcommmsm8909w_firmware
qualcommsdx20_firmware
qualcommsdm429_firmware
qualcommmsm8917_firmware
qualcommsdm660_firmware
qualcommsda845_firmware
qualcommmsm8996au_firmware
qualcommapq8064_firmware
qualcommmsm8937_firmware
qualcommapq8053_firmware
qualcommsxr1130_firmware
qualcommqcs605_firmware
qualcommsdm710_firmware
qualcommsdm670_firmware
qualcommsdm632_firmware
qualcommsm8150_firmware
qualcommsm6150_firmware

…and 27 more

Timeline

References

Open in Interactive Console →