CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2019-14066
High (7.8) in qualcomm. EPSS 0.2% chance of exploitation in the next 30 days.
Integer overflow in calculating estimated output buffer size when getting a list of installed Feature IDs, Serial Numbers or checking Feature ID status in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in Kamorta, MDM9205, MDM9607, Nicobar, QCS404, QCS405, Rennell, SA6155P, SC7180, SC8180X, SDX55, SM6150, SM7150, SXR2130
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 10% of CVEs (scores of 2026-10-31)
- CWE
- CWE-190
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:kamorta_firmware
- qualcomm:mdm9205_firmware
- qualcomm:mdm9607_firmware
- qualcomm:nicobar_firmware
- qualcomm:qcs404_firmware
- qualcomm:qcs405_firmware
- qualcomm:rennell_firmware
- qualcomm:sa6155p_firmware
- qualcomm:sc7180_firmware
- qualcomm:sc8180x_firmware
- qualcomm:sdx55_firmware
- qualcomm:sm6150_firmware
- qualcomm:sm7150_firmware
- qualcomm:sxr2130_firmware