CVE-2019-14100: Buffer Overflow
First published: Thu Jul 30 2020(Updated: )
Register write via debugfs is disabled by default to prevent register writing via debugfs. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9206, MDM9207C, MDM9607, Nicobar, QCS405, SA6155P, SC8180X, SDX55, SM8150
Credit: product-security@qualcomm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Qualcomm MDM9206 | ||
| Qualcomm MDM9206 firmware | ||
| qualcomm MDM9207C firmware | ||
| Qualcomm 9207 LTE Modem | ||
| Qualcomm MD9607 Firmware | ||
| Qualcomm MDM9607 firmware | ||
| Qualcomm Nicobar | ||
| Qualcomm Nicobar | ||
| Qualcomm QCS405 Firmware | ||
| Qualcomm QCS405 Firmware | ||
| Qualcomm SA6155 | ||
| Qualcomm SA6155P | ||
| qualcomm SC8180X firmware | ||
| Qualcomm SC8180 firmware | ||
| Qualcomm SDX55M Firmware | ||
| Qualcomm SDX55 Firmware | ||
| Qualcomm SM8150P Firmware | ||
| Qualcomm SM8150 Fusion |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-14100?
CVE-2019-14100 is a vulnerability that allows register writing via debugfs in certain Qualcomm products.
Which Qualcomm products are affected by CVE-2019-14100?
Qualcomm MDM9206, MDM9207C, MDM9607, Nicobar, QCS405, SA6155P, SC8180X, SDX55, and SM8150 are affected by CVE-2019-14100.
How severe is CVE-2019-14100?
CVE-2019-14100 has a severity value of 7.8, indicating a high severity.
How can I prevent register writing via debugfs in Qualcomm products?
To prevent register writing via debugfs in Qualcomm products, keep the default setting of register write via debugfs disabled.
Where can I find more information about CVE-2019-14100?
You can find more information about CVE-2019-14100 on the Qualcomm Product Security Bulletin for July 2020.
- agent/references
- agent/type
- agent/remedy
- agent/weakness
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/qualcomm
- canonical/qualcomm mdm9206
- canonical/qualcomm mdm9206 firmware
- canonical/qualcomm mdm9207c firmware
- canonical/qualcomm 9207 lte modem
- canonical/qualcomm md9607 firmware
- canonical/qualcomm mdm9607 firmware
- canonical/qualcomm nicobar
- canonical/qualcomm qcs405 firmware
- canonical/qualcomm sa6155
- canonical/qualcomm sa6155p
- canonical/qualcomm sc8180x firmware
- canonical/qualcomm sc8180 firmware
- canonical/qualcomm sdx55m firmware
- canonical/qualcomm sdx55 firmware
- canonical/qualcomm sm8150p firmware
- canonical/qualcomm sm8150 fusion