{"id":"CVE-2019-14046","aliases":["EUVD-2019-5303","GHSA-5xmh-pm96-h87r"],"status":"published","title":"Out of bound access while allocating memory for an array in camera due to improper validation of...","description":"Out of bound access while allocating memory for an array in camera due to improper validation of elements parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music in QCS605, SDM439, SDX24","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00202,"percentile":0.10329,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-129"],"published":"2020-02-07T05:00:38Z","modified":"2026-06-17T02:17:42Z","products":[{"vendor":"qualcomm","product":"qcs605_firmware"},{"vendor":"qualcomm","product":"sdm439_firmware"},{"vendor":"qualcomm","product":"sdx24_firmware"},{"vendor":"qualcomm, inc.","product":"snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice \u0026 music"}],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/february-2020-bulletin","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14046"},{"url":"https://github.com/advisories/GHSA-5xmh-pm96-h87r"}],"sources":{"cve":[{"id":"CVE-2019-14046","description":"Out of bound access while allocating memory for an array in camera due to improper validation of elements parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music in QCS605, SDM439, SDX24","status":"published","published":"2020-02-07T05:00:38Z","modified":"2024-08-05T00:05:44.158Z","updated_at":"2026-11-02T14:20:18.085548Z"}],"euvd":[{"id":"EUVD-2019-5303","description":"Out of bound access while allocating memory for an array in camera due to improper validation of elements parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music in QCS605, SDM439, SDX24","status":"published","published":"2020-02-07T05:00:38Z","modified":"2024-08-05T00:05:44Z","updated_at":"2026-11-03T02:40:41.120486Z"}],"ghsa":[{"id":"GHSA-5xmh-pm96-h87r","title":"Out of bound access while allocating memory for an array in camera due to improper validation of...","description":"Out of bound access while allocating memory for an array in camera due to improper validation of elements parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music in QCS605, SDM439, SDX24","status":"published","published":"2022-05-24T17:08:13Z","modified":"2023-01-29T05:01:28Z","updated_at":"2026-11-02T14:44:49.860954Z"}],"nvd":[{"id":"CVE-2019-14046","description":"Out of bound access while allocating memory for an array in camera due to improper validation of elements parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music in QCS605, SDM439, SDX24","status":"published","published":"2020-02-07T05:15:11.777Z","modified":"2026-06-17T02:17:42.973Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-129"],"updated_at":"2026-11-02T14:05:43.875329Z"}]}}