CVE-2019-14053: High severity android vulnerability
When attempting to create a new XFRM policy, a stack out-of-bounds read will occur if the user provides a template where the mode is set to a value that does not resolve to a valid XFRM mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, APQ8096AU, APQ8098, IPQ4019, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8953, MSM8996AU, QCA4531, QCN7605, QCS605, QM215, SA415M, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-14053?
CVE-2019-14053 is classified with a high severity level due to its potential to cause a stack out-of-bounds read.
How do I fix CVE-2019-14053?
To fix CVE-2019-14053, ensure that you apply the latest security updates provided by Qualcomm or your device manufacturer.
Which devices are affected by CVE-2019-14053?
CVE-2019-14053 affects various Qualcomm Snapdragon devices including firmware versions for APQ8009, APQ8053, and others.
What is a stack out-of-bounds read in the context of CVE-2019-14053?
A stack out-of-bounds read in CVE-2019-14053 occurs when invalid data is read from the memory stack due to improper handling of XFRM policy templates.
Is CVE-2019-14053 publicly known?
Yes, CVE-2019-14053 has been publicly disclosed in security bulletins by Qualcomm and Android.