CVE-2019-14111

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Possible buffer overflow while handling NAN reception of NMF in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ6018, IPQ8074, Nicobar, QCA6390, QCA8081, QCN7605, QCS404, QCS405, Rennell, SC7180, SC8180X, SM6150, SM7150, SM8150, SXR2130

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

No affected versions have been published.

Timeline

Published: Apr 16, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-141129.8Potential buffer overflow while processing CBF frames due to lack of check of buffer length before copy in Snapdragon Auto, Snapdragon Compu CVE-2019-141139.8Buffer overflow can occur in In WLAN firmware while unwraping data using CCMP cipher suite during parsing of EAPOL handshake frame in Snapdr CVE-2019-141149.8Buffer overflow in WLAN firmware while parsing GTK IE containing GTK key having length more than the buffer size in Snapdragon Auto, Snapdra CVE-2019-141155.5u'Information disclosure issue occurs as in current logic as secure touch is released without clearing the display session which can result CVE-2019-141167.8Privilege escalation by using an altered debug policy image can occur as the XPU protecting the debug policy regions are disabled during the CVE-2019-141177.8u'Whenever the page list is updated via privileged user, the previous list elements are freed but are not deleted from the list which result CVE-2019-141197.0u'While processing SMCInvoke asynchronous message header, message count is modified leading to a TOCTOU race condition and lead to memory co CVE-2019-14125.5An information disclosure vulnerability exists in Windows Adobe Type Manager Font Driver (ATMFD.dll) when it fails to properly handle object CVE-2019-141227.8Memory failure in SKB if it fails to to add the requested padding to the skb in low memory targets or targets with major memory fragmentatio CVE-2019-141237.8Possible buffer overflow and over read possible due to missing bounds checks for fixed limits if we consider widevine HLOS client as non-tru CVE-2019-141247.8Memory failure in content protection module due to not having pointer within the scope in Snapdragon Auto, Snapdragon Compute, Snapdragon Mo CVE-2019-141279.8Possible buffer overflow while playing mkv clip due to lack of validation of atom size buffer in Snapdragon Auto, Snapdragon Compute, Snapdr