{"id":"CVE-2019-14030","state":"PUBLISHED","title":"The size of a buffer is determined by addition and multiplications operations that have the potential to overflow due to lack of bound check in Snapdragon Auto, Snapdragon Compute,","description":"The size of a buffer is determined by addition and multiplications operations that have the potential to overflow due to lack of bound check in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9205, QCS404, Rennell, SC8180X, SDM845, SDM850, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130","publishedAt":"2020-03-05T08:56:12.000Z","updatedAt":"2024-08-05T00:05:44.213Z","severity":null,"assigner":"qualcomm","products":["Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking"],"affected":[{"vendor":"Qualcomm, Inc.","product":"Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking","versions":[{"version":"MDM9205, QCS404, Rennell, SC8180X, SDM845, SDM850, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130","status":"affected"}]}],"references":["https://www.qualcomm.com/company/product-security/bulletins/march-2020-bulletin"],"weaknesses":[],"ingestedAt":"2026-10-29T19:45:30.451Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2019/14xxx/CVE-2019-14030.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2019-14030","state":"PUBLISHED","datePublished":"2020-03-05T08:56:12.000Z","dateUpdated":"2024-08-05T00:05:44.213Z","assignerShortName":"qualcomm","assignerOrgId":"2cfc7d3e-20d3-47ac-8db7-1b7285aff15f","dateReserved":"2019-07-19T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"The size of a buffer is determined by addition and multiplications operations that have the potential to overflow due to lack of bound check in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9205, QCS404, Rennell, SC8180X, SDM845, SDM850, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130"}],"affected":[{"vendor":"Qualcomm, Inc.","product":"Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking","versions":[{"version":"MDM9205, QCS404, Rennell, SC8180X, SDM845, SDM850, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130","status":"affected"}]}],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/march-2020-bulletin","tags":["x_refsource_CONFIRM"]}],"problemTypes":[{"descriptions":[{"description":"Buffer Copy Without Checking Size of Input in TrustZone","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"qualcomm","dateUpdated":"2020-03-05T08:56:12.000Z","orgId":"2cfc7d3e-20d3-47ac-8db7-1b7285aff15f"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"product-security@qualcomm.com","ID":"CVE-2019-14030","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking","version":{"version_data":[{"version_value":"MDM9205, QCS404, Rennell, SC8180X, SDM845, SDM850, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130"}]}}]},"vendor_name":"Qualcomm, Inc."}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The size of a buffer is determined by addition and multiplications operations that have the potential to overflow due to lack of bound check in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9205, QCS404, Rennell, SC8180X, SDM845, SDM850, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130"}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Buffer Copy Without Checking Size of Input in TrustZone"}]}]},"references":{"reference_data":[{"name":"https://www.qualcomm.com/company/product-security/bulletins/march-2020-bulletin","refsource":"CONFIRM","url":"https://www.qualcomm.com/company/product-security/bulletins/march-2020-bulletin"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/march-2020-bulletin","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T00:05:44.213Z"}}]}}}