Critical severity · published Feb 7, 2020
CVE-2019-14063
Out of bound access due to Invalid inputs to dapm mux settings which results into kernel failure in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…
9.1
CVSS
0.9%
EPSS
No
On KEV
Description
Out of bound access due to Invalid inputs to dapm mux settings which results into kernel failure in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ6018, IPQ8064, IPQ8074, MDM9607, Nicobar, QCS405, Rennell, SA6155P, Saipan, SC8180X, SDM630, SDM636, SDM660, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 59% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IF
Ipq4019 Firmware · Qualcomm
All versions, or not specified · source: NVD
IF
Ipq6018 Firmware · Qualcomm
All versions, or not specified · source: NVD
IF
Ipq8064 Firmware · Qualcomm
All versions, or not specified · source: NVD
IF
Ipq8074 Firmware · Qualcomm
All versions, or not specified · source: NVD
MF
Mdm9607 Firmware · Qualcomm
All versions, or not specified · source: NVD
NF
Nicobar Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qcs405 Firmware · Qualcomm
All versions, or not specified · source: NVD
RF
Rennell Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sa6155p Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Saipan Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sc8180x Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sdm630 Firmware · Qualcomm
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-14063
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-14063
Patch
https://www.qualcomm.com/company/product-security/bulletins/february-2020-bulletin
More from Ipq4019 Firmware
7.8
CVE-2023-33063
Use After Free in DSP Services
9.8
CVE-2024-21473
Memory corruption while redirecting log file to any file location with any file name
9.8
CVE-2023-33083
Memory corruption in WLAN Host while processing RRM beacon on the AP
9.8
CVE-2023-33082
Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE
9.8
CVE-2022-33279
Memory corruption due to stack based buffer overflow in WLAN having invalid WNM frame length