CVE-2019-10614: Critical severity qualcomm apq8009w firmware vulnerability
Out of boundary access is possible as there is no validation of data accessed against the received size of the packet in case of malicious firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCN7605, QCS405, QCS605, QM215, SA6155P, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-10614?
CVE-2019-10614 is considered to have a high severity due to the potential for out-of-bounds access and the risk it poses to affected Qualcomm devices.
How do I fix CVE-2019-10614?
To fix CVE-2019-10614, you should update the firmware of affected Qualcomm devices to the latest version provided by Qualcomm that addresses this vulnerability.
Which devices are affected by CVE-2019-10614?
CVE-2019-10614 affects a range of Qualcomm devices including various Snapdragon platforms such as the apq8009, apq8017, and many others listed in the bulletin.
What is the risk associated with CVE-2019-10614?
The risk associated with CVE-2019-10614 includes unauthorized access to sensitive data and potential control over affected devices due to improper validation of incoming packets.
Is CVE-2019-10614 exploited in the wild?
As of the last reported assessment, there are no confirmed cases of CVE-2019-10614 being actively exploited in the wild, but the vulnerability remains a serious concern.