{"id":"CVE-2019-14085","aliases":["EUVD-2019-5340","GHSA-x4wr-fxwh-p3m9"],"status":"published","title":"Possible Integer underflow in WLAN function due to lack of check of data received from user side...","description":"Possible Integer underflow in WLAN function due to lack of check of data received from user side in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCN7605, QCS605, SDA845, SDM670, SDM710, SDM845, SDM850, SM8150, SXR1130","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00202,"percentile":0.10296,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-191"],"published":"2020-03-05T08:56:18Z","modified":"2026-06-17T02:17:48Z","products":[{"vendor":"qualcomm","product":"qcn7605_firmware"},{"vendor":"qualcomm","product":"qcs605_firmware"},{"vendor":"qualcomm","product":"sda845_firmware"},{"vendor":"qualcomm","product":"sdm670_firmware"},{"vendor":"qualcomm","product":"sdm710_firmware"},{"vendor":"qualcomm","product":"sdm845_firmware"},{"vendor":"qualcomm","product":"sdm850_firmware"},{"vendor":"qualcomm","product":"sm8150_firmware"},{"vendor":"qualcomm","product":"sxr1130_firmware"},{"vendor":"qualcomm, inc.","product":"snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile"}],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/march-2020-bulletin","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14085"},{"url":"https://github.com/advisories/GHSA-x4wr-fxwh-p3m9"}],"sources":{"cve":[{"id":"CVE-2019-14085","description":"Possible Integer underflow in WLAN function due to lack of check of data received from user side in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCN7605, QCS605, SDA845, SDM670, SDM710, SDM845, SDM850, SM8150, SXR1130","status":"published","published":"2020-03-05T08:56:18Z","modified":"2024-08-05T00:12:42.171Z","updated_at":"2026-11-02T14:20:17.722148Z"}],"euvd":[{"id":"EUVD-2019-5340","description":"Possible Integer underflow in WLAN function due to lack of check of data received from user side in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCN7605, QCS605, SDA845, SDM670, SDM710, SDM845, SDM850, SM8150, SXR1130","status":"published","published":"2020-03-05T08:56:18Z","modified":"2024-08-05T00:12:42Z","updated_at":"2026-11-03T02:40:40.581814Z"}],"ghsa":[{"id":"GHSA-x4wr-fxwh-p3m9","title":"Possible Integer underflow in WLAN function due to lack of check of data received from user side...","description":"Possible Integer underflow in WLAN function due to lack of check of data received from user side in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCN7605, QCS605, SDA845, SDM670, SDM710, SDM845, SDM850, SM8150, SXR1130","status":"published","published":"2022-05-24T17:10:14Z","modified":"2023-01-29T05:01:36Z","updated_at":"2026-11-02T14:44:52.185162Z"}],"nvd":[{"id":"CVE-2019-14085","description":"Possible Integer underflow in WLAN function due to lack of check of data received from user side in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCN7605, QCS605, SDA845, SDM670, SDM710, SDM845, SDM850, SM8150, SXR1130","status":"published","published":"2020-03-05T09:15:17.75Z","modified":"2026-06-17T02:17:48.337Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-191"],"updated_at":"2026-11-02T14:05:45.254119Z"}]}}