Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2019-14088
HistoryFeb 07, 2020 - 5:15 a.m.

CVE-2019-14088

2020-02-0705:15:12
CWE-416
[email protected]
web.nvd.nist.gov
6

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.3

Confidence

High

EPSS

0.001

Percentile

30.1%

JSON

Possible use after free issue while CRM is accessing the link pointer from device private data due to lack of resource protection in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, MDM9206, MDM9207C, MDM9607, QCS605, SDM429W, SDX24, SM8150, SXR1130

Affected configurations

Nvd
Node
qualcommapq8009Match-
AND
qualcommapq8009_firmwareMatch-
Node
qualcommmdm9206Match-
AND
qualcommmdm9206_firmwareMatch-
Node
qualcommmdm9207cMatch-
AND
qualcommmdm9207c_firmwareMatch-
Node
qualcommmdm9607Match-
AND
qualcommmdm9607_firmwareMatch-
Node
qualcommqcs605Match-
AND
qualcommqcs605_firmwareMatch-
Node
qualcommsdm429wMatch-
AND
qualcommsdm429w_firmwareMatch-
Node
qualcommsdx24Match-
AND
qualcommsdx24_firmwareMatch-
Node
qualcommsm8150Match-
AND
qualcommsm8150_firmwareMatch-
Node
qualcommsxr1130_firmwareMatch-
AND
qualcommsxr1130Match-
VendorProductVersionCPE
qualcommapq8009-cpe:2.3:h:qualcomm:apq8009:-:*:*:*:*:*:*:*
qualcommapq8009_firmware-cpe:2.3:o:qualcomm:apq8009_firmware:-:*:*:*:*:*:*:*
qualcommmdm9206-cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*
qualcommmdm9206_firmware-cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*
qualcommmdm9207c-cpe:2.3:h:qualcomm:mdm9207c:-:*:*:*:*:*:*:*
qualcommmdm9207c_firmware-cpe:2.3:o:qualcomm:mdm9207c_firmware:-:*:*:*:*:*:*:*
qualcommmdm9607-cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*
qualcommmdm9607_firmware-cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*
qualcommqcs605-cpe:2.3:h:qualcomm:qcs605:-:*:*:*:*:*:*:*
qualcommqcs605_firmware-cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*
Rows per page:
1-10 of 181

Related

cve 1
prion 1
cvelist 1
zdi 1
androidsecurity 1
cve
cve
CVE-2019-14088
2020-02-07 05:15:12
prion
prion
Design/Logic Flaw
2020-02-07 05:15:00
cvelist
cvelist
CVE-2019-14088
2020-02-07 05:00:41
zdi
zdi
Google Android V4l2 cam_actuator_driver_cmd Use-After-Free Privilege Escalation Vulnerability
2020-02-07 00:00:00
androidsecurity
androidsecurity
Pixel Update Bulletin—February 2020
2020-02-03 00:00:00

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.3

Confidence

High

EPSS

0.001

Percentile

30.1%

JSON
Related for NVD:CVE-2019-14088
cve1prion1cvelist1zdi1androidsecurity1