CVE-2019-14027

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions APQ8098, IPQ6018, IPQ8074, MSM8998, Nicobar, QCA8081, QCN7605, QCS404, QCS605, Rennell, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SXR1130, SXR2130

Description: The issue is caused by a buffer overflow due to the lack of an upper bound check on channel length, which is used for a loop. This affects various Qualcomm Snapdragon products, including Compute, Connectivity, Consumer Electronics Connectivity, Consumer IOT, Industrial IOT, Mobile, and Wired Infrastructure and Networking.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.