CVE-2019-14105: Qualcomm SDA845 Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Kernel was reading the CSL defined reserved field as uint16 instead of uint32 which could lead to memory overflow in Snapdragon Industrial IOT, Snapdragon Mobile in SDA845, SDM845, SM8150

Affected products

• Qualcomm SDA845 Firmware: affected versions not specified
• Qualcomm SDM845 Firmware: affected versions not specified
• Qualcomm SM8150 Firmware: affected versions not specified

Published 2020-04-16. Last modified 2026-06-17.