CVE-2019-14080

Out of bound write can happen due to lack of check of array index value while parsing SDP attribute for SAR in Snapdragon Auto, Snapdragon Compute, Snapdragon…

published June 22, 2020

CVSS
—
EPSS
1%
Percentile
53.0
In the wild
Unconfirmed
What it is

⚠️ An out-of-bounds write in Snapdragon's software can let attackers mess with your precious data! 😱 Think of this like a hotel that allows guests to access rooms they're not booked for, potentially rummaging through all kinds of private belongings. In this case, an index check isn't in place, so attackers might write data where it doesn't belong, disrupting functionality. If exploited, this vulnerability could lead to unexpected behaviors in devices, causing crashes or data corruption. An attacker could write malicious data, leading to instability in critical systems, which is absolutely devastating for any device reliant on Snapdragon technology.

Put simply

Think of this like a hotel that allows guests to access rooms they're not booked for, potentially rummaging through all kinds of private belongings. In this case, an index check isn't in place, so attackers might write data where it doesn't belong, disrupting functionality. CVE-2019-14080 arises from a lack of bounds checking on array index values while parsing SDP attributes in multiple Snapdragon devices. This means out-of-bounds data can be written, potentially impacting device stability.

What to do

If exploited, this vulnerability could lead to unexpected behaviors in devices, causing crashes or data corruption. An attacker could write malicious data, leading to instability in critical systems, which is absolutely devastating for any device reliant on Snapdragon technology. To address this issue, ensure that affected Snapdragon devices have the latest firmware updates installed. Monitor vendor security bulletins for any patches and consider contacting your device manufacturer for guidance on remediation steps. You’ve got this! Stay proactive, keep your devices updated, and you’ll keep those pesky vulnerabilities at bay! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00711 · 53.0th percentile
Published
2020-06-22T07:10Z
EPSS history
Timeline
  • 22 JUN 07:10Z
    Out of bound write can happen due to lack of check of array index value while parsing SDP attribute for SAR in Snapdragon Auto, Snapdragon Compute, Snapdragon…
    cvelistv5