What is CVE-2019-14122?

CVE-2019-14122 is a high-severity vulnerability in Qualcomm Saipan, classified under Improper Handling of Exceptional Conditions. CVSS score: 7.8/10. Published 2020-04-16.

How severe is CVE-2019-14122?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Qualcomm Saipan

CVE-2019-14122

Memory failure in SKB if it fails to to add the requested padding to the skb in low memory targets or targets with major memory fragmentation in Snapdragon Auto, Snapdragon Mobile in Saipan, SM8150, SM8250, SXR2130

EPSS: 0.002 (10.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Qualcomm Saipan
Qualcomm Saipan_firmware
Qualcomm Sm8150
Qualcomm Sm8150_firmware
Qualcomm Sm8250
Qualcomm Sm8250_firmware
Qualcomm Sxr2130
Qualcomm Sxr2130_firmware
Qualcomm, Inc. Snapdragon Auto, Mobile — versions Saipan, SM8150, SM8250, SXR2130

Weakness classification (CWE)

CWE-755 — Improper Handling of Exceptional Conditions

References

product-security@qualcomm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2019-14122?: CVE-2019-14122 is a high-severity vulnerability in Qualcomm Saipan, classified under Improper Handling of Exceptional Conditions. CVSS score: 7.8/10. Published 2020-04-16.
How severe is CVE-2019-14122?: High severity. CVSS v3 base score is 7.8 out of 10.