CVE-2019-14135 PUBLISHED CVSS 7.800000190734863 HIGH

Possible integer overflow to buffer overflow in WLAN while parsing nonstandard NAN IE messages. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA4010, QCA6174A, QCA6574AU, QCA6584AU, QCA8081, QCA9377, QCA9379, QCA9886, QCN7605, QCS405, QCS605, SA6155P, Saipan, SDA845, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SM6150, SM7150, SM8150, SXR1130

EPSS 0.03% · 10.1th percentile

Risk Scores

CVSS v3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.03%
10.1th percentile

Affected Products

VendorProductVersions
qualcommqcs605_firmware
qualcommsm8150_firmware
qualcommmdm9206_firmware
qualcommsaipan_firmware
qualcommsdx20_firmware
qualcommsdm710_firmware
qualcommsdx24_firmware
qualcommsda845_firmware
qualcommqca8081_firmware
qualcommsdm850_firmware
qualcommmdm9207c_firmware
qualcommsdm670_firmware
qualcommmdm9650_firmware
qualcommqca6584au_firmware
qualcommsdm845_firmware
qualcommmdm9640_firmware
qualcommsm6150_firmware
qualcommsm7150_firmware
qualcommqca6574au_firmware
qualcommsxr1130_firmware

…and 17 more

Timeline

References

Open in Interactive Console →