CVE-2019-2317: Critical severity android vulnerability
The secret key used to make the Initial Sequence Number in the TCP SYN packet could be brute forced and therefore can be predicted in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, Nicobar, QCM2150, QM215, SC8180X, SDM429, SDM439, SDM450, SDM632, SDX24, SDX55, SM6150, SM7150, SM8150
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-2317?
CVE-2019-2317 is a vulnerability that allows the secret key used to make the Initial Sequence Number in the TCP SYN packet to be brute forced.
How severe is CVE-2019-2317?
CVE-2019-2317 has a severity rating of 9.8 (Critical).
Which software products are affected by CVE-2019-2317?
Qualcomm Msm8905 Firmware, Qualcomm Msm8917 Firmware, Qualcomm Msm8920 Firmware, Qualcomm Msm8937 Firmware, Qualcomm Msm8940 Firmware, Qualcomm Sdm439 Firmware, Qualcomm Sdm632 Firmware, Qualcomm Sdx24 Firmware, Qualcomm Sdx55 Firmware, Google Android are affected by CVE-2019-2317.
How can I fix CVE-2019-2317?
To fix CVE-2019-2317, apply the necessary security patches provided by Qualcomm or Google.
Where can I find more information about CVE-2019-2317?
You can find more information about CVE-2019-2317 on the official Qualcomm and Google websites.