CVE-2019-14085

highpriority · track · 31EPSS 0.002 · 10 %ileEUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.20% (10th) EPSS

CVSS 7.2 · high

Is it mine?

10 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · nvd

EPSS · scored 2026-10-28

Possible Integer underflow in WLAN function due to lack of check of data received from user side in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCN7605, QCS605, SDA845, SDM670, SDM710, SDM845, SDM850, SM8150, SXR1130

cvss

Technical severity, 0–10. One row per scoring source.

7.8

010

base score 0–10 · higher = more severe · hover a vector to decode

v2.07.2highAV:L/AC:L/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USexploitability 3.9 · impact 10

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 1.8 · impact 5.9

v3.17.1highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-191USprimary

affected products (10)

Products and version ranges known to be affected.

Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile≤ QCN7605, QCS605, SDA845, SDM670, SDM710, SDM845, SDM850, SM8150, SXR1130enisa_euvdEU
qualcomm qcn7605 firmwareall versionsnvdUScpe:2.3:o:qualcomm:qcn7605_firmware:*:*:*:*:*:*:*:*
qualcomm qcs605 firmwareall versionsnvdUScpe:2.3:o:qualcomm:qcs605_firmware:*:*:*:*:*:*:*:*
qualcomm sda845 firmwareall versionsnvdUScpe:2.3:o:qualcomm:sda845_firmware:*:*:*:*:*:*:*:*
qualcomm sdm670 firmwareall versionsnvdUScpe:2.3:o:qualcomm:sdm670_firmware:*:*:*:*:*:*:*:*
qualcomm sdm710 firmwareall versionsnvdUScpe:2.3:o:qualcomm:sdm710_firmware:*:*:*:*:*:*:*:*
qualcomm sdm845 firmwareall versionsnvdUScpe:2.3:o:qualcomm:sdm845_firmware:*:*:*:*:*:*:*:*
qualcomm sdm850 firmwareall versionsnvdUScpe:2.3:o:qualcomm:sdm850_firmware:*:*:*:*:*:*:*:*
qualcomm sm8150 firmwareall versionsnvdUScpe:2.3:o:qualcomm:sm8150_firmware:*:*:*:*:*:*:*:*
qualcomm sxr1130 firmwareall versionsnvdUScpe:2.3:o:qualcomm:sxr1130_firmware:*:*:*:*:*:*:*:*

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd nvd NVD CVE.org MITRE

published 2020-03-05modified 2026-06-17

related (720)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2022-0185US	high8.4OT critical	25.2% (98th)	KEV	2022-02-11
A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters…
CVE-2021-31956US	high9.3OT critical	22.3% (98th)	KEV	2021-06-08
Windows NTFS Elevation of Privilege Vulnerability
CVE-2014-0497US	critical9.8OT critical	99.9% (100th)	KEV	2014-02-05
Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote atta…
CVE-2019-12255US	critical9.8	75.3% (100th)	Exploit	2019-08-09
Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow.
CVE-2017-14496US	high7.5	68.4% (99th)	Exploit	2017-10-03
Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a…

+715 more

references (5)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan