Integer overflow in Qualcomm Apq8098
CVE-2019-14086
Possible integer overflow while checking the length of frame which is a 32 bit integer and is added to another 32 bit integer which can lead to unexpected result during the check in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8098, MDM9607, MSM8998, QCA6584, QCN7605, QCS605, SDA660, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SXR1130
Vulnerability class: Integer Overflow
EPSS: 0.009 (56.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
Weakness classification (CWE)
References
- product-security@qualcomm.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2019-14086?
- CVE-2019-14086 is a critical-severity vulnerability in Qualcomm Apq8098, classified under Integer Overflow or Wraparound. CVSS score: 9.8/10. Published 2020-03-05.
- How severe is CVE-2019-14086?
- Critical severity. CVSS v3 base score is 9.8 out of 10.