High severity · published Feb 7, 2020
CVE-2019-14044
Out of bound access due to access of uninitialized memory segment in an array of pointers while normal camera open close in Snapdragon Consumer IOT, Snapdragon Mobile in QCS605,…
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
Out of bound access due to access of uninitialized memory segment in an array of pointers while normal camera open close in Snapdragon Consumer IOT, Snapdragon Mobile in QCS605, SDM439, SDM630, SDM636, SDM660, SDX24
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 10% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
QF
Qcs605 Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sdm439 Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sdm630 Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sdm636 Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sdm660 Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sdx24 Firmware · Qualcomm
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-14044
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-14044
Patch
https://www.qualcomm.com/company/product-security/bulletins/february-2020-bulletin
More from Qcs605 Firmware
9.8
CVE-2023-28543
A malformed DLC can trigger Memory Corruption in SNPE library due to out of bounds read, such as by loading an untrusted model (e.g
9.8
CVE-2022-40537
Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response
9.8
CVE-2022-40515
Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms
9.8
CVE-2022-33234
Memory corruption in video due to configuration weakness
9.8
CVE-2022-25688
Memory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…