cve/2019/CVE-2019-14134.md

### [CVE-2019-14134](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14134)
![](https://img.shields.io/static/v1?label=Product&message=Snapdragon%20Compute%2C%20Snapdragon%20Consumer%20IOT%2C%20Snapdragon%20Industrial%20IOT%2C%20Snapdragon%20Mobile%2C%20Snapdragon%20Wired%20Infrastructure%20and%20Networking&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Buffer%20Over-read%20Issue%20in%20WLAN&color=brighgreen)

### Description

Possible out of bound access in WLAN handler when the received value of length in rx path is shorter than the expected value of country IE in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ8074, QCA8081, QCS605, SDA845, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SXR1130

### POC

#### Reference
- https://www.qualcomm.com/company/product-security/bulletins/april-2020-bulletin
- https://www.qualcomm.com/company/product-security/bulletins/april-2020-bulletin

#### Github
No PoCs found on GitHub currently.