CVE-2019-14004

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Buffer overflow occurs while processing invalid MKV clip, which has invalid EBML size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCS605, QM215, Rennell, SA6155P, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

No affected versions have been published.

Timeline

Published: Jan 21, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-140059.8Buffer overflow occur while playing the clip which is nonstandard due to lack of check of size duration in Snapdragon Auto, Snapdragon Compu CVE-2019-140069.8Buffer overflow occur while playing the clip which is nonstandard due to lack of offset length check in Snapdragon Auto, Snapdragon Compute,CVE-2019-140075.5Due to the use of non-time-constant comparison functions there is issue in timing side channels which can be used as a potential side channe CVE-2019-140087.5Possible null pointer dereference issue in location assistance data processing due to missing null check on resources before using it in Sna CVE-2019-140097.8Out of bound memory access while processing TZ command handler due to improper input validation on response length received from user in Sna CVE-2019-140107.5The device may enter into error state when some tool or application gets failure at 1st buffer map all and performs 2nd buffer map which hap CVE-2019-140119.1Multiple Read overflows issue due to improper length check while decoding 3G attach accept/ SMS/ pdn connection reject/ esm data transport/ CVE-2019-140127.5Possibility of null pointer deference as the array of video codecs from media info is referenced without null checking while processing SDP CVE-2019-140139.8While parsing invalid super index table, elements within super index table may exceed total chunk size and invalid data is read into the tab CVE-2019-140149.8Possible buffer overflow when byte array receives incorrect input from reading source as array is not null terminated in Snapdragon Consumer CVE-2019-140157.8A stack-based buffer overflow exists in the initialization of the identification stage due to lack of check on the number of templates provi CVE-2019-140169.8Integer overflow occurs while playing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdra