VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 22, 2020· Updated Aug 5, 2024

CVE-2019-14047

CVE-2019-14047

Description

While IPA driver processes route add rule IOCTL, there is no input validation of the rule ID prior to adding the rule to the IPA HW commit list in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8053, APQ8096AU, MDM9607, MSM8909W, MSM8996, MSM8996AU, QCN7605, QCS605, SC8180X, SDA845, SDX20, SDX24, SDX55, SM8150, SXR1130

Affected products

4
  • Qualcomm/Snapdragon Automobilellm-fuzzy
  • Qualcomm/Snapdragon Computellm-fuzzy
  • Qualcomm/Snapdragon Mobilellm-fuzzy
  • Qualcomm, Inc./Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearablesv5
    Range: APQ8053, APQ8096AU, MDM9607, MSM8909W, MSM8996, MSM8996AU, QCN7605, QCS605, SC8180X, SDA845, SDX20, SDX24, SDX55, SM8150, SXR1130

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.