CVE-2019-14057
9.1 criticalEPSS 0.9%
Critical (9.1) in qualcomm. EPSS 0.9% chance of exploitation in the next 30 days.
Buffer Over read of codec private data while parsing an mkv file due to lack of check of buffer size before read in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA6574AU, QCS405, QCS605, QM215, Rennell, SA6155P, Saipan, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
Severity
CVSS 3.1
9.1 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H- EPSS
- 0.9% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
- CWE
- CWE-125
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:apq8009_firmware
- qualcomm:apq8017_firmware
- qualcomm:apq8053_firmware
- qualcomm:apq8064_firmware
- qualcomm:apq8096au_firmware
- qualcomm:apq8098_firmware
- qualcomm:mdm9206_firmware
- qualcomm:mdm9207c_firmware
- qualcomm:mdm9607_firmware
- qualcomm:msm8905_firmware
- qualcomm:msm8909w_firmware
- qualcomm:msm8917_firmware
- qualcomm:msm8920_firmware
- qualcomm:msm8937_firmware
- qualcomm:msm8939_firmware
- qualcomm:msm8940_firmware
- qualcomm:msm8953_firmware
- qualcomm:msm8996_firmware
- qualcomm:msm8996au_firmware
- qualcomm:msm8998_firmware
- qualcomm:nicobar_firmware
- qualcomm:qca6574au_firmware
- qualcomm:qcs405_firmware
- qualcomm:qcs605_firmware
- qualcomm:qm215_firmware
- qualcomm:rennell_firmware
- qualcomm:sa6155p_firmware
- qualcomm:saipan_firmware
- qualcomm:sda660_firmware
- qualcomm:sda845_firmware
- qualcomm:sdm429_firmware
- qualcomm:sdm429w_firmware
- qualcomm:sdm439_firmware
- qualcomm:sdm450_firmware
- qualcomm:sdm630_firmware
- qualcomm:sdm632_firmware
- qualcomm:sdm636_firmware
- qualcomm:sdm660_firmware
- qualcomm:sdm670_firmware
- qualcomm:sdm710_firmware
- qualcomm:sdm845_firmware
- qualcomm:sdx20_firmware
- qualcomm:sm6150_firmware
- qualcomm:sm7150_firmware
- qualcomm:sm8150_firmware
- qualcomm:sm8250_firmware
- qualcomm:sxr1130_firmware
- qualcomm:sxr2130_firmware
References
Check your stackJSON