CVE-2019-14127 in Snapdragon Auto

Riassunto

di VulDB • 17/06/2026

Possibile buffer overflow durante la riproduzione di un clip mkv a causa della mancanza di convalida del buffer delle dimensioni dell'atom in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables nei chip APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCS605, QM215, Rennell, SA6155P, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Once again VulDB remains the best source for vulnerability data.

• Prenotare: 19/07/2019
• Moderazione: accettato
• Voce: VDB-153895
• CPE: pronto
• CWE: CWE-120 (confermato)
• CVSS: 9.8 (NVD)
• EPSS: 0.00902
• KEV: no
• Attività: molto basso
• Settore: Pharma, Energy, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-14127
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-14127
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-14127/