CVE-2019-14076

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Buffer overflow occurs while processing an subsample data length out of range due to lack of user input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8098, Kamorta, MDM9150, MDM9205, MDM9206, MDM9607, MDM9650, MSM8905, MSM8909, MSM8998, Nicobar, QCS404, QCS405, QCS605, Rennell, SA415M, SC7180, SC8180X, SDA845, SDM670, SDM710, SDM845, SDM850, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

No affected versions have been published.

Timeline

Published
Jun 22, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-140777.8Out of bound memory access while processing ese transmit command due to passing Response buffer received from user in Snapdragon Auto, SnapdCVE-2019-140787.8Out of bound memory access while processing qpay due to not validating length of the response buffer provided by User. in Snapdragon Auto, SCVE-2019-140797.8Access to the uninitialized variable when the driver tries to unmap the dma buffer of a request which was never mapped in the first place leCVE-2019-14087.8An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k CVE-2019-140809.8Out of bound write can happen due to lack of check of array index value while parsing SDP attribute for SAR in Snapdragon Auto, Snapdragon CCVE-2019-140817.1Buffer Over-read when WLAN module gets a WMI message for SAR limits with invalid number of limits to be enforced in Snapdragon Compute, SnapCVE-2019-140829.1Potential buffer over-read due to lack of bound check of memory offset passed in WLAN firmware in Snapdragon Compute, Snapdragon Consumer ElCVE-2019-140839.8While parsing Service Descriptor Extended Attribute received as part of SDF frame, there is a possibility that incorrect length is specifiedCVE-2019-140857.8Possible Integer underflow in WLAN function due to lack of check of data received from user side in Snapdragon Auto, Snapdragon Compute, SnaCVE-2019-140869.8Possible integer overflow while checking the length of frame which is a 32 bit integer and is added to another 32 bit integer which can leadCVE-2019-140877.8Failure in buffer management while accessing handle for HDR blit when color modes not supported by display in Snapdragon Consumer IOT, SnapdCVE-2019-140887.8Possible use after free issue while CRM is accessing the link pointer from device private data due to lack of resource protection in Snapdra