High severity7.8NVD Advisory· Published Jun 2, 2020· Updated Jun 17, 2026
CVE-2019-14078
CVE-2019-14078
Description
Out of bound memory access while processing qpay due to not validating length of the response buffer provided by User. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8098, MSM8909, MSM8998, SDA660, SDA845, SDM630, SDM636, SDM660, SDM845
Affected products
12- cpe:2.3:o:qualcomm:apq8009_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:apq8098_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:msm8909_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:msm8998_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sda845_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sdm630_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sdm636_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sdm845_firmware:-:*:*:*:*:*:*:*
- Qualcomm, Inc./Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networkingv5Range: APQ8009, APQ8098, MSM8909, MSM8998, SDA660, SDA845, SDM630, SDM636, SDM660, SDM845
Patches
Vulnerability mechanics
References
1- www.qualcomm.com/company/product-security/bulletins/may-2020-bulletinnvdVendor Advisory
News mentions
0No linked articles in our index yet.