CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2019-14131
Critical (9.8) in qualcomm. EPSS 0.9% chance of exploitation in the next 30 days.
Out of bound write can occur in radio measurement request if STA receives multiple invalid rrm measurement request from AP in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8053, APQ8096AU, MSM8998, Nicobar, QCA6574AU, QCS605, Rennell, SA6155P, Saipan, SC8180X, SDM660, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130
Severity
- EPSS
- 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
- CWE
- CWE-787
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:apq8053_firmware
- qualcomm:apq8096au_firmware
- qualcomm:msm8998_firmware
- qualcomm:nicobar_firmware
- qualcomm:qca6574au_firmware
- qualcomm:qcs605_firmware
- qualcomm:rennell_firmware
- qualcomm:sa6155p_firmware
- qualcomm:saipan_firmware
- qualcomm:sc8180x_firmware
- qualcomm:sdm660_firmware
- qualcomm:sdm710_firmware
- qualcomm:sdm845_firmware
- qualcomm:sdx20_firmware
- qualcomm:sdx24_firmware
- qualcomm:sdx55_firmware
- qualcomm:sm6150_firmware
- qualcomm:sm7150_firmware
- qualcomm:sm8150_firmware
- qualcomm:sm8250_firmware
- qualcomm:sxr2130_firmware