{"id":"CVE-2019-14130","url":"https://www.cyber-defence.io/tools/cve/CVE-2019-14130","generatedAt":"2026-10-28T20:28:00.944Z","title":"Memory corruption can occurs in trusted application if offset size from HLOS is more than actual mapped buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Kamorta, QCS404, Rennell,…","description":"Memory corruption can occurs in trusted application if offset size from HLOS is more than actual mapped buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Kamorta, QCS404, Rennell, SC7180, SDX55, SM6150, SM7150, SM8250, SXR2130","published":"2020-07-30T12:15:12.000Z","lastModified":"2026-06-17T02:17:53.000Z","status":"Modified","sourceIdentifier":"product-security@qualcomm.com","cvss":{"version":"3.1","score":7.8,"severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-119","CWE-787"],"affected":["qualcomm/kamorta firmware","qualcomm/qcs404 firmware","qualcomm/rennell firmware","qualcomm/sc7180 firmware","qualcomm/sdx55 firmware","qualcomm/sm6150 firmware","qualcomm/sm7150 firmware","qualcomm/sm8250 firmware","qualcomm/sxr2130 firmware"],"epss":{"score":0.00208,"percentile":0.10801,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.21%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/july-2020-bulletin","tags":["Broken Link"],"source":"product-security@qualcomm.com"},{"url":"https://www.qualcomm.com/company/product-security/bulletins/july-2020-security-bulletin","tags":["Vendor Advisory"],"source":"nvd@nist.gov"},{"url":"https://www.qualcomm.com/company/product-security/bulletins/july-2020-bulletin","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-14130","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}