What is CVE-2019-14085?

CVE-2019-14085 is a high-severity vulnerability in Qualcomm Qcn7605, classified under Integer Underflow. CVSS score: 7.8/10. Published 2020-03-05.

How severe is CVE-2019-14085?

High severity. CVSS v3 base score is 7.8 out of 10.

Integer overflow in Qualcomm Qcn7605

CVE-2019-14085

Possible Integer underflow in WLAN function due to lack of check of data received from user side in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCN7605, QCS605, SDA845, SDM670, SDM710, SDM845, SDM850, SM8150, SXR1130

EPSS: 0.002 (10.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

CWE-191 — Integer Underflow

References

product-security@qualcomm.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2019-14085?: CVE-2019-14085 is a high-severity vulnerability in Qualcomm Qcn7605, classified under Integer Underflow. CVSS score: 7.8/10. Published 2020-03-05.
How severe is CVE-2019-14085?: High severity. CVSS v3 base score is 7.8 out of 10.