What is CVE-2019-14023?

CVE-2019-14023 is a high-severity vulnerability in Qualcomm Mdm9607. CVSS score: 7.8/10. Published 2020-01-21.

How severe is CVE-2019-14023?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Qualcomm Mdm9607

CVE-2019-14023

String format issue will occur while processing HLOS data as there is no user input validation to ensure inputs are properly NULL terminated before string copy in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9607, Nicobar, Rennell, SA6155P, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130

EPSS: 0.002 (10.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Qualcomm Mdm9607
Qualcomm Mdm9607_firmware
Qualcomm Nicobar
Qualcomm Nicobar_firmware
Qualcomm Rennell
Qualcomm Rennell_firmware
Qualcomm Sa6155p
Qualcomm Sa6155p_firmware
Qualcomm Sdx55
Qualcomm Sdx55_firmware

References

product-security@qualcomm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2019-14023?: CVE-2019-14023 is a high-severity vulnerability in Qualcomm Mdm9607. CVSS score: 7.8/10. Published 2020-01-21.
How severe is CVE-2019-14023?: High severity. CVSS v3 base score is 7.8 out of 10.