What is CVE-2019-14124?

CVE-2019-14124 is a high-severity vulnerability in Qualcomm Kamorta, classified under Access of Uninitialized Pointer. CVSS score: 7.8/10. Published 2020-07-30.

How severe is CVE-2019-14124?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Qualcomm Kamorta

CVE-2019-14124

Memory failure in content protection module due to not having pointer within the scope in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Kamorta, QCS404, Rennell, SC7180, SDX55, SM6150, SM7150, SM8250, SXR2130

EPSS: 0.002 (10.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Qualcomm Kamorta
Qualcomm Kamorta_firmware
Qualcomm Qcs404
Qualcomm Qcs404_firmware
Qualcomm Rennell
Qualcomm Rennell_firmware
Qualcomm Sc7180
Qualcomm Sc7180_firmware
Qualcomm Sdx55
Qualcomm Sdx55_firmware

Weakness classification (CWE)

CWE-824 — Access of Uninitialized Pointer

References

product-security@qualcomm.com (x_refsource_CONFIRM, Broken Link)
nvd@nist.gov (Vendor Advisory)

Frequently asked questions

What is CVE-2019-14124?: CVE-2019-14124 is a high-severity vulnerability in Qualcomm Kamorta, classified under Access of Uninitialized Pointer. CVSS score: 7.8/10. Published 2020-07-30.
How severe is CVE-2019-14124?: High severity. CVSS v3 base score is 7.8 out of 10.