High severity · published Jan 21, 2020
CVE-2019-14010
The device may enter into error state when some tool or application gets failure at 1st buffer map all and performs 2nd buffer map which happens to be at same physical address in…
7.5
CVSS
0.7%
EPSS
No
On KEV
Description
The device may enter into error state when some tool or application gets failure at 1st buffer map all and performs 2nd buffer map which happens to be at same physical address in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9607, Nicobar, Rennell, SA6155P, SDM660, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 51% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MF
Mdm9607 Firmware · Qualcomm
All versions, or not specified · source: NVD
NF
Nicobar Firmware · Qualcomm
All versions, or not specified · source: NVD
RF
Rennell Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sa6155p Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sdm660 Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sdx55 Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sm6150 Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sm7150 Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sm8150 Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sm8250 Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sxr2130 Firmware · Qualcomm
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-14010
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-14010
Patch
https://www.qualcomm.com/company/product-security/bulletins/january-2020-bulletin
More from Mdm9607 Firmware
7.8
CVE-2021-1905
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
5.5
CVE-2021-1906
Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability
9.8
CVE-2022-40510
Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder
9.8
CVE-2022-40537
Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response
9.8
CVE-2022-40515
Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms