High severity · published Feb 7, 2020
CVE-2019-14046
Out of bound access while allocating memory for an array in camera due to improper validation of elements parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer…
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
Out of bound access while allocating memory for an array in camera due to improper validation of elements parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in QCS605, SDM439, SDX24
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 10% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
QF
Qcs605 Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sdm439 Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sdx24 Firmware · Qualcomm
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-14046
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-14046
Patch
https://www.qualcomm.com/company/product-security/bulletins/february-2020-bulletin
More from Qcs605 Firmware
9.8
CVE-2023-28543
Out of Bounds read in SNPE Library
9.8
CVE-2022-40537
Improper Validation of Array Index in Bluetooth HOST
9.8
CVE-2022-40515
Double free in Video
9.8
CVE-2022-33234
Memory corruption in video due to configuration weakness
9.8
CVE-2022-25688
Memory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…