CVE-2019-14046

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-02-07 · updated 2026-06-17
Weakness: CWE-129

Description

Out of bound access while allocating memory for an array in camera due to improper validation of elements parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in QCS605, SDM439, SDX24

Affected products

Qualcomm Qcs605 Firmware: all versions
Qualcomm Sdm439 Firmware: all versions
Qualcomm Sdx24 Firmware: all versions

References

https://www.qualcomm.com/company/product-security/bulletins/february-2020-bulletin
https://www.qualcomm.com/company/product-security/bulletins/february-2020-bulletin

Get alerted when CVE-2019-14046 or the next vulnerability affects your stack