Not rated

CVE-2019-14040 Using memory after being freed in qsee due to wrong implementation can lead to unexpected behavior such as execution…

Description

Using memory after being freed in qsee due to wrong implementation can lead to unexpected behavior such as execution of unknown code in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, QCS605, QM215, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SDX24, SM8150, SXR1130

Affected products and versions

Product	Affected versions	Fixed in
Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables	Versions not published

References

www.qualcomm.com www.qualcomm.com

Timeline

Published February 7, 2020
Last modified August 5, 2024

The 50 CVEs of Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables →

CVE-2019-14073 Copying RTCP messages into the output buffer without checking the destination buffer size which could lead to a remote… Not rated CVE-2019-14062 Buffer overflows while decoding setup message from Network due to lack of check of IE message length received from… Not rated CVE-2020-3616 Buffer overflow in display function due to memory copy without checking length of size using strcpy function in… Not rated CVE-2019-14038 Buffer over-read in ADSP parse function due to lack of check for availability of sufficient data payload received in… Not rated

Track this CVE