Vulnerability Description
String format issue will occur while processing HLOS data as there is no user input validation to ensure inputs are properly NULL terminated before string copy in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9607, Nicobar, Rennell, SA6155P, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Qualcomm | Mdm9607 Firmware | - |
| Qualcomm | Mdm9607 | - |
| Qualcomm | Nicobar Firmware | - |
| Qualcomm | Nicobar | - |
| Qualcomm | Rennell Firmware | - |
| Qualcomm | Rennell | - |
| Qualcomm | Sa6155P Firmware | - |
| Qualcomm | Sa6155P | - |
| Qualcomm | Sdx55 Firmware | - |
| Qualcomm | Sdx55 | - |
| Qualcomm | Sm6150 Firmware | - |
| Qualcomm | Sm6150 | - |
| Qualcomm | Sm7150 Firmware | - |
| Qualcomm | Sm7150 | - |
| Qualcomm | Sm8150 Firmware | - |
| Qualcomm | Sm8150 | - |
| Qualcomm | Sm8250 Firmware | - |
| Qualcomm | Sm8250 | - |
| Qualcomm | Sxr2130 Firmware | - |
| Qualcomm | Sxr2130 | - |
References
- https://www.qualcomm.com/company/product-security/bulletins/january-2020-bulletiPatchVendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins/january-2020-bulletiPatchVendor Advisory
FAQ
What is CVE-2019-14023?
CVE-2019-14023 is a vulnerability with a CVSS score of 7.8 (HIGH). String format issue will occur while processing HLOS data as there is no user input validation to ensure inputs are properly NULL terminated before string copy in Snapdragon Auto, Snapdragon Consumer ...
How severe is CVE-2019-14023?
CVE-2019-14023 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-14023?
Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Mdm9607 Firmware, Qualcomm Mdm9607, Qualcomm Nicobar Firmware, Qualcomm Nicobar, Qualcomm Rennell Firmware.