CVE-2019-14066

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Integer overflow in calculating estimated output buffer size when getting a list of installed Feature IDs, Serial Numbers or checking Feature ID status in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in Kamorta, MDM9205, MDM9607, Nicobar, QCS404, QCS405, Rennell, SA6155P, SC7180, SC8180X, SDX55, SM6150, SM7150, SXR2130

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published: Jun 2, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-140675.5Using non-time-constant functions like memcmp to compare sensitive data can lead to information leakage through timing side channel issue. i CVE-2019-140687.8Out of bound access in msm routing due to lack of check of size before accessing in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer CVE-2019-14077.8An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphi CVE-2019-140707.0Possible use after free issue in pcm volume controls due to race condition exist in private data used in mixer controls in Snapdragon Auto, CVE-2019-140717.8Compromised reset handler may bypass access control due to AC config is being reset if debug path is enabled to collect secure or non-secure CVE-2019-140727.0Unhandled paging request is observed due to dereferencing an already freed object because of race condition between sparse free and sparse b CVE-2019-140739.8Copying RTCP messages into the output buffer without checking the destination buffer size which could lead to a remote stack overflow when p CVE-2019-140747.8u'Heap overflow in diag command handler due to lack of check of packet length received from user' in Snapdragon Auto, Snapdragon Compute, Sn CVE-2019-140755.5Null pointer dereference issue in radio interface layer due to lack of null check in sapmodule destructor in Snapdragon Auto, Snapdragon Con CVE-2019-140767.8Buffer overflow occurs while processing an subsample data length out of range due to lack of user input validation in Snapdragon Auto, Snapd CVE-2019-140777.8Out of bound memory access while processing ese transmit command due to passing Response buffer received from user in Snapdragon Auto, Snapd CVE-2019-140787.8Out of bound memory access while processing qpay due to not validating length of the response buffer provided by User. in Snapdragon Auto, S