CVSS 3.1
7.0 highCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2019-14119
High (7.0) in qualcomm. EPSS 0.1% chance of exploitation in the next 30 days.
u'While processing SMCInvoke asynchronous message header, message count is modified leading to a TOCTOU race condition and lead to memory corruption' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ6018, Kamorta, MDM9205, MDM9607, Nicobar, QCS404, QCS405, QCS605, QCS610, Rennell, SA415M, SA515M, SA6155P, SC7180, SC8180X, SDM670, SDM710, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
Severity
- EPSS
- 0.1% chance of exploitation in the next 30 days; higher than 2% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-367, CWE-787
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:ipq6018_firmware
- qualcomm:kamorta_firmware
- qualcomm:mdm9205_firmware
- qualcomm:mdm9607_firmware
- qualcomm:nicobar_firmware
- qualcomm:qcs404_firmware
- qualcomm:qcs405_firmware
- qualcomm:qcs605_firmware
- qualcomm:qcs610_firmware
- qualcomm:rennell_firmware
- qualcomm:sa415m_firmware
- qualcomm:sa515m_firmware
- qualcomm:sa6155p_firmware
- qualcomm:sc7180_firmware
- qualcomm:sc8180x_firmware
- qualcomm:sdm670_firmware
- qualcomm:sdm710_firmware
- qualcomm:sdx24_firmware
- qualcomm:sdx55_firmware
- qualcomm:sm6150_firmware
- qualcomm:sm7150_firmware
- qualcomm:sm8150_firmware
- qualcomm:sm8250_firmware
- qualcomm:sxr1130_firmware
- qualcomm:sxr2130_firmware