CVE-2019-14087

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Failure in buffer management while accessing handle for HDR blit when color modes not supported by display in Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wearables in MSM8909W, QCS605

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Jun 2, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-140887.8Possible use after free issue while CRM is accessing the link pointer from device private data due to lack of resource protection in SnapdraCVE-2019-140897.8u'Keymaster attestation key and device IDs provisioning which is a one time process is incorrectly allowed to be re-provisioned after a userCVE-2019-14095.5An information disclosure vulnerability exists when the Windows Remote Procedure Call (RPC) runtime improperly initializes objects in memoryCVE-2019-140917.8Double free issue in NPU due to lack of resource locking mechanism to avoid race condition in Snapdragon Auto, Snapdragon Compute, SnapdragoCVE-2019-140925.5System Services exports services without permission protect and can lead to information exposure in Snapdragon Industrial IOT, Snapdragon MoCVE-2019-140937.8Array out of bound access can occur in display module due to lack of bound check on input parcel received in Snapdragon Auto, Snapdragon ConCVE-2019-140947.8Integer overflow in diag command handler when user inputs a large value for number of tasks field in the request packet in Snapdragon Auto, CVE-2019-140959.8Buffer overflow occurs while processing LMP packet in which name length parameter exceeds value specified in BT-specification in Snapdragon CVE-2019-140979.8Possible buffer overflow in WLAN Parser due to lack of length check when copying data in Snapdragon Auto, Snapdragon Compute, Snapdragon ConCVE-2019-140989.8Possible buffer overflow in data offload handler due to lack of check of keydata length when copying data in Snapdragon Auto, Snapdragon ComCVE-2019-140997.8Device misbehavior may be observed when incorrect offset, length or number of buffers is passed by user space in Snapdragon Auto, SnapdragonCVE-2019-141007.8Register write via debugfs is disabled by default to prevent register writing via debugfs. in Snapdragon Auto, Snapdragon Compute, Snapdrago