Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-14105

Kernel was reading the CSL defined reserved field as uint16 instead of uint32 which could lead to memory overflow in Snapdragon Industrial IOT, Snapdragon Mobile in SDA845, SDM845, SM8150

Published

2020-04-16T11:15:14.980

Last Modified

2024-11-21T04:26:06.117

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

3.9

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-787
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System qualcomm sda845_firmware - Yes
Hardware qualcomm sda845 - No
Operating System qualcomm sdm845_firmware - Yes
Hardware qualcomm sdm845 - No
Operating System qualcomm sm8150_firmware - Yes
Hardware qualcomm sm8150 - No
References