CVE-2019-14134 PUBLISHED CVSS 9.800000190734863 CRITICAL

Possible out of bound access in WLAN handler when the received value of length in rx path is shorter than the expected value of country IE in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ8074, QCA8081, QCS605, SDA845, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SXR1130

EPSS 0.31% · 54.2th percentile

Risk Scores

CVSS v3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.31%
54.2th percentile

Affected Products

VendorProductVersions
qualcommipq8074_firmware
qualcommsxr1130_firmware
qualcommsdm710_firmware
qualcommsm6150_firmware
qualcommqcs605_firmware
qualcommsdm670_firmware
qualcommsda845_firmware
qualcommsm8150_firmware
qualcommsdm850_firmware
qualcommqca8081_firmware
qualcommsm7150_firmware
Qualcomm, Inc.Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and NetworkingIPQ8074, QCA8081, QCS605, SDA845, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SXR1130
qualcommsdm845_firmware

Timeline

References

Open in Interactive Console →