SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2019-14083

While parsing Service Descriptor Extended Attribute received as part of SDF frame, there is a possibility that incorrect length is specified in the attribute length field of extended SSI which can lead to integer underflow in Snapdragon Auto, Snapdragon…

CRITICAL 9.8EPSS 0.96%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.96%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

While parsing Service Descriptor Extended Attribute received as part of SDF frame, there is a possibility that incorrect length is specified in the attribute length field of extended SSI which can lead to integer underflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, APQ8096, APQ8098, IPQ6018, IPQ8074, MSM8996AU, MSM8998, Nicobar, QCA6174A, QCA6390, QCA6574AU, QCA8081, QCA9377, QCA9379, QCN7605, QCS404, QCS405, QCS605, Rennell, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SM6150, SM7150, SM8150, SXR1130, SXR2130

CVSS 3.1
9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.96% probability · 60th percentile
CISA KEV
Not listed
Weakness
CWE-191
Affected
qualcomm/apq8009 firmware · qualcomm/apq8053 firmware · qualcomm/apq8096 firmware · qualcomm/apq8098 firmware · qualcomm/ipq6018 firmware · qualcomm/ipq8074 firmware · qualcomm/msm8996au firmware · qualcomm/msm8998 firmware · qualcomm/nicobar firmware · qualcomm/qca6174a firmware · qualcomm/qca6390 firmware · qualcomm/qca6574au firmware · qualcomm/qca8081 firmware · qualcomm/qca9377 firmware · qualcomm/qca9379 firmware · qualcomm/qcn7605 firmware · qualcomm/qcs404 firmware · qualcomm/qcs405 firmware · qualcomm/qcs605 firmware · qualcomm/rennell firmware · +17 more
Source
product-security@qualcomm.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.