CVE-2019-14082

Potential buffer over-read due to lack of bound check of memory offset passed in WLAN firmware in Snapdragon Compute, Snapdragon Consumer Electronics…

published March 5, 2020

CVSS
—
EPSS
1%
Percentile
58.6
In the wild
Unconfirmed
What it is

⚠️ A potential buffer over-read lurks in the WLAN firmware of several Snapdragon devices! This could lead to some unexpected data exposure! 🔥 Think of it like a library that allows visitors to access books beyond their assigned sections, leading to accidental discoveries of sensitive information hidden in the back stacks – risky business! 📚 An attacker could potentially exploit this oversight to read beyond allocated memory, revealing unintended data. While the severity is currently classified as unknown, any vulnerability that allows data exposure is a cause for concern. 📉

Put simply

Think of it like a library that allows visitors to access books beyond their assigned sections, leading to accidental discoveries of sensitive information hidden in the back stacks – risky business! 📚 This vulnerability arises from a lack of boundary checks on memory offsets in the WLAN firmware across various Snapdragon platforms, risking unintentional data access through buffer over-read scenarios.

What to do

An attacker could potentially exploit this oversight to read beyond allocated memory, revealing unintended data. While the severity is currently classified as unknown, any vulnerability that allows data exposure is a cause for concern. 📉 To mitigate this issue, monitor for firmware updates from your device manufacturer and apply patches as soon as they are released. Regularly audit your devices for compliance and safety. 🛡️ You've got this! Stay vigilant and keep your devices updated for a more secure experience! ✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00876 · 58.6th percentile
Published
2020-03-05T08:56Z
EPSS history
Timeline
  • 05 MAR 08:56Z
    Potential buffer over-read due to lack of bound check of memory offset passed in WLAN firmware in Snapdragon Compute, Snapdragon Consumer Electronics…
    cvelistv5