1. Home
  2. CVE Database
  3. CVE-2019-14082
CRITICAL · 9.1

CVE-2019-14082

Potential buffer over-read due to lack of bound check of memory offset passed in WLAN firmware in Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon ...

Vulnerability Description

Potential buffer over-read due to lack of bound check of memory offset passed in WLAN firmware in Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ8074, MDM9206, MDM9207C, MDM9607, QCN7605, SM8150

CVSS Score

9.1

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
QualcommIpq8074 Firmware-
QualcommIpq8074-
QualcommMdm9206 Firmware-
QualcommMdm9206-
QualcommMdm9207C Firmware-
QualcommMdm9207C-
QualcommMdm9607 Firmware-
QualcommMdm9607-
QualcommQcn7605 Firmware-
QualcommQcn7605-
QualcommSm8150 Firmware-
QualcommSm8150-

Related Weaknesses (CWE)

CWE-20CWE-125

References

FAQ

What is CVE-2019-14082?

CVE-2019-14082 is a vulnerability with a CVSS score of 9.1 (CRITICAL). Potential buffer over-read due to lack of bound check of memory offset passed in WLAN firmware in Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon ...

How severe is CVE-2019-14082?

CVE-2019-14082 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2019-14082?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Ipq8074 Firmware, Qualcomm Ipq8074, Qualcomm Mdm9206 Firmware, Qualcomm Mdm9206, Qualcomm Mdm9207C Firmware.