CRITICAL · 9.1

CVE-2019-14063

Out of bound access due to Invalid inputs to dapm mux settings which results into kernel failure in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon ...

Vulnerability Description

Out of bound access due to Invalid inputs to dapm mux settings which results into kernel failure in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ6018, IPQ8064, IPQ8074, MDM9607, Nicobar, QCS405, Rennell, SA6155P, Saipan, SC8180X, SDM630, SDM636, SDM660, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130

CVSS Score

9.1

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
QualcommIpq4019 Firmware-
QualcommIpq4019-
QualcommIpq6018 Firmware-
QualcommIpq6018-
QualcommIpq8064 Firmware-
QualcommIpq8064-
QualcommIpq8074 Firmware-
QualcommIpq8074-
QualcommMdm9607 Firmware-
QualcommMdm9607-
QualcommNicobar Firmware-
QualcommNicobar-
QualcommQcs405 Firmware-
QualcommQcs405-
QualcommRennell Firmware-
QualcommRennell-
QualcommSa6155P Firmware-
QualcommSa6155P-
QualcommSaipan Firmware-
QualcommSaipan-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2019-14063?

CVE-2019-14063 is a vulnerability with a CVSS score of 9.1 (CRITICAL). Out of bound access due to Invalid inputs to dapm mux settings which results into kernel failure in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon ...

How severe is CVE-2019-14063?

CVE-2019-14063 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2019-14063?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Ipq4019 Firmware, Qualcomm Ipq4019, Qualcomm Ipq6018 Firmware, Qualcomm Ipq6018, Qualcomm Ipq8064 Firmware.