CVE-2019-14100: Buffer Overflow
First published: Thu Jul 30 2020(Updated: )
Register write via debugfs is disabled by default to prevent register writing via debugfs. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9206, MDM9207C, MDM9607, Nicobar, QCS405, SA6155P, SC8180X, SDX55, SM8150
Credit: product-security@qualcomm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Qualcomm Mdm9206 Firmware | ||
| Qualcomm Mdm9206 | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Mdm9607 | ||
| Google Android | ||
| Qualcomm Nicobar | ||
| Qualcomm Qcs405 Firmware | ||
| Qualcomm Qcs405 | ||
| Google Android | ||
| Qualcomm Sa6155p | ||
| Qualcomm Sc8180x Firmware | ||
| Qualcomm Sc8180x | ||
| Qualcomm Sdx55 Firmware | ||
| Qualcomm Sdx55 | ||
| Qualcomm Sm8150 Firmware | ||
| Qualcomm Sm8150 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-14100?
CVE-2019-14100 is a vulnerability that allows register writing via debugfs in certain Qualcomm products.
Which Qualcomm products are affected by CVE-2019-14100?
Qualcomm MDM9206, MDM9207C, MDM9607, Nicobar, QCS405, SA6155P, SC8180X, SDX55, and SM8150 are affected by CVE-2019-14100.
How severe is CVE-2019-14100?
CVE-2019-14100 has a severity value of 7.8, indicating a high severity.
How can I prevent register writing via debugfs in Qualcomm products?
To prevent register writing via debugfs in Qualcomm products, keep the default setting of register write via debugfs disabled.
Where can I find more information about CVE-2019-14100?
You can find more information about CVE-2019-14100 on the Qualcomm Product Security Bulletin for July 2020.
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/description
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/remedy
- agent/weakness
- collector/mitre-cve
- source/MITRE
- vendor/qualcomm
- canonical/qualcomm mdm9206 firmware
- canonical/qualcomm mdm9206
- canonical/google android
- canonical/qualcomm mdm9607
- canonical/qualcomm nicobar
- canonical/qualcomm qcs405 firmware
- canonical/qualcomm qcs405
- canonical/qualcomm sa6155p
- canonical/qualcomm sc8180x firmware
- canonical/qualcomm sc8180x
- canonical/qualcomm sdx55 firmware
- canonical/qualcomm sdx55
- canonical/qualcomm sm8150 firmware
- canonical/qualcomm sm8150