2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-14113 | CRITICAL | 9.8 | 0.9% | Apr 16, 2020 | Buffer overflow can occur in In WLAN firmware while unwraping data using CCMP cipher suite during parsing of EAPOL hands... |
| CVE-2019-14112 | CRITICAL | 9.8 | 0.9% | Apr 16, 2020 | Potential buffer overflow while processing CBF frames due to lack of check of buffer length before copy in Snapdragon Au... |
| CVE-2019-14111 | CRITICAL | 9.8 | 0.9% | Apr 16, 2020 | Possible buffer overflow while handling NAN reception of NMF in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti... |
| CVE-2019-14110 | CRITICAL | 9.8 | 0.9% | Apr 16, 2020 | Buffer overflow can occur in function wlan firmware while copying association frame content if frame length is more than... |
| CVE-2019-14105 | HIGH | 7.8 | 0.2% | Apr 16, 2020 | Kernel was reading the CSL defined reserved field as uint16 instead of uint32 which could lead to memory overflow in Sna... |
| CVE-2019-14104 | HIGH | 7.1 | 0.2% | Apr 16, 2020 | Slab-out-of-bounds access can occur if the context pointer is invalid due to lack of null check on pointer before access... |
| CVE-2019-14075 | MEDIUM | 5.5 | 0.2% | Apr 16, 2020 | Null pointer dereference issue in radio interface layer due to lack of null check in sapmodule destructor in Snapdragon ... |
| CVE-2019-14070 | HIGH | 7 | 0.1% | Apr 16, 2020 | Possible use after free issue in pcm volume controls due to race condition exist in private data used in mixer controls ... |
| CVE-2019-14033 | CRITICAL | 9.1 | 0.9% | Apr 16, 2020 | Multiple Read overflows issue due to improper length check while decoding tau reject/tau accept/detach request/attach re... |
| CVE-2019-14022 | HIGH | 7.5 | 0.8% | Apr 16, 2020 | Error occurs While extracting the ipv6_header having an invalid length due to lack of length check in Snapdragon Auto, S... |
| CVE-2019-14021 | HIGH | 7.8 | 0.2% | Apr 16, 2020 | Possible buffer overrun when processing EFS filename and payload sent over diag interface due to lack of check for filen... |
| CVE-2019-14020 | CRITICAL | 9.1 | 0.9% | Apr 16, 2020 | Multiple Read overflows issue due to improper length check while decoding dedicated_eps_bearer_req/ act_def_context_req/... |
| CVE-2019-14019 | CRITICAL | 9.1 | 0.9% | Apr 16, 2020 | Multiple Read overflows issue due to improper length check while decoding RAU accept/PDN disconnect Rej/Modify EPS ctxt ... |
| CVE-2019-14018 | HIGH | 7.8 | 0.2% | Apr 16, 2020 | Possible out of bound array access as there is no check on carrier index passed in Snapdragon Auto, Snapdragon Compute, ... |
| CVE-2019-14012 | HIGH | 7.5 | 0.8% | Apr 16, 2020 | Possibility of null pointer deference as the array of video codecs from media info is referenced without null checking w... |
| CVE-2019-14011 | CRITICAL | 9.1 | 0.9% | Apr 16, 2020 | Multiple Read overflows issue due to improper length check while decoding 3G attach accept/ SMS/ pdn connection reject/ ... |
| CVE-2019-14009 | HIGH | 7.8 | 0.2% | Apr 16, 2020 | Out of bound memory access while processing TZ command handler due to improper input validation on response length recei... |
| CVE-2019-14007 | MEDIUM | 5.5 | 0.2% | Apr 16, 2020 | Due to the use of non-time-constant comparison functions there is issue in timing side channels which can be used as a p... |
| CVE-2019-14001 | HIGH | 7.8 | 0.1% | Apr 16, 2020 | Wrong public key usage from existing oem_keystore for hash generation in Snapdragon Auto, Snapdragon Consumer IOT, Snapd... |
| CVE-2019-10625 | HIGH | 7.1 | 0.2% | Apr 16, 2020 | Out of bound access in diag services when DCI command buffer reallocation is not done properly with required capacity in... |
| CVE-2019-10624 | HIGH | 7.8 | 0.2% | Apr 16, 2020 | While handling the vendor command there is an integer truncation issue that could yield a buffer overflow due to int dat... |
| CVE-2019-10623 | HIGH | 7.1 | 0.2% | Apr 16, 2020 | Possible integer overflow can happen in host driver while processing user controlled string due to improper validation o... |
| CVE-2019-10622 | CRITICAL | 9.1 | 0.5% | Apr 16, 2020 | Out of bound memory access can happen while parsing ADSP message due to lack of check of size of payload received from u... |
| CVE-2019-10621 | HIGH | 7.8 | 0.2% | Apr 16, 2020 | Use after free issue when MAP and UNMAP calls at same time as data structure used my MAP may be freed by UNMAP function ... |
| CVE-2019-10620 | HIGH | 7.8 | 0.2% | Apr 16, 2020 | Kernel memory error in debug module due to improper check of user data length before copying into memory in Snapdragon A... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now