CVE-2019-14066

CVE-2019-14066: vulnerability in Qualcomm, Inc. Snapdragon Auto, Snapdragon…

Published · Updated

Follow this CVE+ Monitor Snapdragon Mobile+ Monitor Snapdragon Industrial IOT

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.2%
Integer overflow in calculating estimated output buffer size when getting a list of installed Feature IDs, Serial Numbers or checking Feature ID status in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in Kamorta, MDM9205, MDM9607, Nicobar, QCS404, QCS405, Rennell, SA6155P, SC7180, SC8180X, SDX55, SM6150, SM7150, SXR2130
Affected products
Qualcomm, Inc. · Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Related CVEs — Qualcomm, Inc. Snapdragon Auto, Snapdragon…

In the same product, most dangerous first.

CVE-2019-14063—CVE-2019-14063EPSS 0.9%CVE-2020-3679—CVE-2020-3679EPSS 0.3%CVE-2019-14065—CVE-2019-14065EPSS 0.2%CVE-2019-14056—CVE-2019-14056EPSS 0.2%CVE-2020-11127—CVE-2020-11127EPSS 0.2%CVE-2019-14050—CVE-2019-14050EPSS 0.2%