{"id":"CVE-2019-14111","aliases":["EUVD-2019-5364","GHSA-4qfh-xcp4-cgp9"],"status":"published","title":"Possible buffer overflow while handling NAN reception of NMF in Snapdragon Auto, Snapdragon...","description":"Possible buffer overflow while handling NAN reception of NMF in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wired Infrastructure and Networking in IPQ6018, IPQ8074, Nicobar, QCA6390, QCA8081, QCN7605, QCS404, QCS405, Rennell, SC7180, SC8180X, SM6150, SM7150, SM8150, SXR2130","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00902,"percentile":0.60027,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-120"],"published":"2020-04-16T10:46:15Z","modified":"2026-06-17T02:17:51Z","products":[{"vendor":"qualcomm","product":"ipq6018_firmware"},{"vendor":"qualcomm","product":"ipq8074_firmware"},{"vendor":"qualcomm","product":"nicobar_firmware"},{"vendor":"qualcomm","product":"qca6390_firmware"},{"vendor":"qualcomm","product":"qca8081_firmware"},{"vendor":"qualcomm","product":"qcn7605_firmware"},{"vendor":"qualcomm","product":"qcs404_firmware"},{"vendor":"qualcomm","product":"qcs405_firmware"},{"vendor":"qualcomm","product":"rennell_firmware"},{"vendor":"qualcomm","product":"sc7180_firmware"},{"vendor":"qualcomm","product":"sc8180x_firmware"},{"vendor":"qualcomm","product":"sm6150_firmware"},{"vendor":"qualcomm","product":"sm7150_firmware"},{"vendor":"qualcomm","product":"sm8150_firmware"},{"vendor":"qualcomm","product":"sxr2130_firmware"},{"vendor":"qualcomm, inc.","product":"snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon mobile, snapdragon voice \u0026 music, snapdragon wired infrastructure and networking"}],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/april-2020-bulletin","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14111"},{"url":"https://github.com/advisories/GHSA-4qfh-xcp4-cgp9"}],"sources":{"cve":[{"id":"CVE-2019-14111","description":"Possible buffer overflow while handling NAN reception of NMF in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wired Infrastructure and Networking in IPQ6018, IPQ8074, Nicobar, QCA6390, QCA8081, QCN7605, QCS404, QCS405, Rennell, SC7180, SC8180X, SM6150, SM7150, SM8150, SXR2130","status":"published","published":"2020-04-16T10:46:15Z","modified":"2024-08-05T00:12:42.515Z","updated_at":"2026-11-02T14:20:18.085548Z"}],"euvd":[{"id":"EUVD-2019-5364","description":"Possible buffer overflow while handling NAN reception of NMF in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wired Infrastructure and Networking in IPQ6018, IPQ8074, Nicobar, QCA6390, QCA8081, QCN7605, QCS404, QCS405, Rennell, SC7180, SC8180X, SM6150, SM7150, SM8150, SXR2130","status":"published","published":"2020-04-16T10:46:15Z","modified":"2024-08-05T00:12:42Z","updated_at":"2026-11-03T02:40:40.581814Z"}],"ghsa":[{"id":"GHSA-4qfh-xcp4-cgp9","title":"Possible buffer overflow while handling NAN reception of NMF in Snapdragon Auto, Snapdragon...","description":"Possible buffer overflow while handling NAN reception of NMF in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wired Infrastructure and Networking in IPQ6018, IPQ8074, Nicobar, QCA6390, QCA8081, QCN7605, QCS404, QCS405, Rennell, SC7180, SC8180X, SM6150, SM7150, SM8150, SXR2130","status":"published","published":"2022-05-24T17:15:22Z","modified":"2023-01-29T05:02:21Z","updated_at":"2026-11-02T14:45:03.903455Z"}],"nvd":[{"id":"CVE-2019-14111","description":"Possible buffer overflow while handling NAN reception of NMF in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wired Infrastructure and Networking in IPQ6018, IPQ8074, Nicobar, QCA6390, QCA8081, QCN7605, QCS404, QCS405, Rennell, SC7180, SC8180X, SM6150, SM7150, SM8150, SXR2130","status":"published","published":"2020-04-16T11:15:15.073Z","modified":"2026-06-17T02:17:51.09Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:05:46.451008Z"}]}}