CVE-2019-14074
7.8 highEPSS 0.2%
High (7.8) in qualcomm. EPSS 0.2% chance of exploitation in the next 30 days.
u'Heap overflow in diag command handler due to lack of check of packet length received from user' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8076, APQ8096AU, APQ8098, Bitra, IPQ6018, IPQ8074, Kamorta, MDM9150, MDM9205, MDM9206, MDM9207C, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA8081, QCM2150, QCN7605, QCS404, QCS405, QCS605, QCS610, QM215, Rennell, SA415M, SA6155P, Saipan, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
Severity
CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 10% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-20, CWE-190, CWE-787
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:apq8009_firmware
- qualcomm:apq8017_firmware
- qualcomm:apq8053_firmware
- qualcomm:apq8076_firmware
- qualcomm:apq8096au_firmware
- qualcomm:apq8098_firmware
- qualcomm:bitra_firmware
- qualcomm:ipq6018_firmware
- qualcomm:ipq8074_firmware
- qualcomm:kamorta_firmware
- qualcomm:mdm9150_firmware
- qualcomm:mdm9205_firmware
- qualcomm:mdm9206_firmware
- qualcomm:mdm9207c_firmware
- qualcomm:mdm9607_firmware
- qualcomm:mdm9625_firmware
- qualcomm:mdm9635m_firmware
- qualcomm:mdm9640_firmware
- qualcomm:mdm9645_firmware
- qualcomm:mdm9650_firmware
- qualcomm:mdm9655_firmware
- qualcomm:msm8905_firmware
- qualcomm:msm8909_firmware
- qualcomm:msm8909w_firmware
- qualcomm:msm8917_firmware
- qualcomm:msm8920_firmware
- qualcomm:msm8937_firmware
- qualcomm:msm8940_firmware
- qualcomm:msm8953_firmware
- qualcomm:msm8996_firmware
- qualcomm:msm8996au_firmware
- qualcomm:msm8998_firmware
- qualcomm:nicobar_firmware
- qualcomm:qca8081_firmware
- qualcomm:qcm2150_firmware
- qualcomm:qcn7605_firmware
- qualcomm:qcs404_firmware
- qualcomm:qcs405_firmware
- qualcomm:qcs605_firmware
- qualcomm:qcs610_firmware
- qualcomm:qm215_firmware
- qualcomm:rennell_firmware
- qualcomm:sa415m_firmware
- qualcomm:sa6155p_firmware
- qualcomm:saipan_firmware
- qualcomm:sc7180_firmware
- qualcomm:sc8180x_firmware
- qualcomm:sda660_firmware
- qualcomm:sda845_firmware
- qualcomm:sdm429_firmware
References
Check your stackJSON