CVE-2019-14066: Qualcomm Kamorta Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Integer overflow in calculating estimated output buffer size when getting a list of installed Feature IDs, Serial Numbers or checking Feature ID status in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in Kamorta, MDM9205, MDM9607, Nicobar, QCS404, QCS405, Rennell, SA6155P, SC7180, SC8180X, SDX55, SM6150, SM7150, SXR2130

Affected products

• Qualcomm Kamorta Firmware: affected versions not specified
• Qualcomm MDM9205 Firmware: affected versions not specified
• Qualcomm MDM9607 Firmware: affected versions not specified
• Qualcomm Nicobar Firmware: affected versions not specified
• Qualcomm QCS404 Firmware: affected versions not specified
• Qualcomm QCS405 Firmware: affected versions not specified
• Qualcomm Rennell Firmware: affected versions not specified
• Qualcomm SA6155P Firmware: affected versions not specified
• Qualcomm SC7180 Firmware: affected versions not specified
• Qualcomm SC8180X Firmware: affected versions not specified
• Qualcomm SDX55 Firmware: affected versions not specified
• Qualcomm SM6150 Firmware: affected versions not specified
• Qualcomm SM7150 Firmware: affected versions not specified
• Qualcomm SXR2130 Firmware: affected versions not specified

Published 2020-06-02. Last modified 2026-06-17.