Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2019-10614: Qualcomm APQ8009‑APQ8098 firmware may read beyond packet data

CVE-2019-10614 · published 6 years ago

Summary

Certain Qualcomm firmware for the APQ8009, APQ8017, APQ8053, APQ8096AU and APQ8098 chips does not verify how large incoming data is before processing it. A malicious firmware update could cause the code to read memory it shouldn’t, which can lead to crashes or allow unintended actions. Apply the latest firmware updates from Qualcomm as soon as they are available.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
qualcomm	apq8009_firmware	All versions `cpe:2.3:o:qualcomm:apq8009_firmware:-:::::::*`
qualcomm	apq8017_firmware	All versions `cpe:2.3:o:qualcomm:apq8017_firmware:-:::::::*`
qualcomm	apq8053_firmware	All versions `cpe:2.3:o:qualcomm:apq8053_firmware:-:::::::*`
qualcomm	apq8096au_firmware	All versions `cpe:2.3:o:qualcomm:apq8096au_firmware:-:::::::*`
qualcomm	apq8098_firmware	All versions `cpe:2.3:o:qualcomm:apq8098_firmware:-:::::::*`
qualcomm	mdm9206_firmware	All versions `cpe:2.3:o:qualcomm:mdm9206_firmware:-:::::::*`
qualcomm	mdm9207c_firmware	All versions `cpe:2.3:o:qualcomm:mdm9207c_firmware:-:::::::*`
qualcomm	mdm9607_firmware	All versions `cpe:2.3:o:qualcomm:mdm9607_firmware:-:::::::*`
qualcomm	mdm9640_firmware	All versions `cpe:2.3:o:qualcomm:mdm9640_firmware:-:::::::*`
qualcomm	mdm9650_firmware	All versions `cpe:2.3:o:qualcomm:mdm9650_firmware:-:::::::*`
qualcomm	msm8909w_firmware	All versions `cpe:2.3:o:qualcomm:msm8909w_firmware:-:::::::*`
qualcomm	msm8917_firmware	All versions `cpe:2.3:o:qualcomm:msm8917_firmware:-:::::::*`
qualcomm	msm8920_firmware	All versions `cpe:2.3:o:qualcomm:msm8920_firmware:-:::::::*`
qualcomm	msm8937_firmware	All versions `cpe:2.3:o:qualcomm:msm8937_firmware:-:::::::*`
qualcomm	msm8940_firmware	All versions `cpe:2.3:o:qualcomm:msm8940_firmware:-:::::::*`
qualcomm	msm8953_firmware	All versions `cpe:2.3:o:qualcomm:msm8953_firmware:-:::::::*`
qualcomm	msm8996au_firmware	All versions `cpe:2.3:o:qualcomm:msm8996au_firmware:-:::::::*`
qualcomm	msm8998_firmware	All versions `cpe:2.3:o:qualcomm:msm8998_firmware:-:::::::*`
qualcomm	nicobar_firmware	All versions `cpe:2.3:o:qualcomm:nicobar_firmware:-:::::::*`
qualcomm	qcn7605_firmware	All versions `cpe:2.3:o:qualcomm:qcn7605_firmware:-:::::::*`
qualcomm	qcs405_firmware	All versions `cpe:2.3:o:qualcomm:qcs405_firmware:-:::::::*`
qualcomm	qcs605_firmware	All versions `cpe:2.3:o:qualcomm:qcs605_firmware:-:::::::*`
qualcomm	qm215_firmware	All versions `cpe:2.3:o:qualcomm:qm215_firmware:-:::::::*`
qualcomm	sa6155p_firmware	All versions `cpe:2.3:o:qualcomm:sa6155p_firmware:-:::::::*`
qualcomm	sda660_firmware	All versions `cpe:2.3:o:qualcomm:sda660_firmware:-:::::::*`
qualcomm	sda845_firmware	All versions `cpe:2.3:o:qualcomm:sda845_firmware:-:::::::*`
qualcomm	sdm429_firmware	All versions `cpe:2.3:o:qualcomm:sdm429_firmware:-:::::::*`
qualcomm	sdm439_firmware	All versions `cpe:2.3:o:qualcomm:sdm439_firmware:-:::::::*`
qualcomm	sdm450_firmware	All versions `cpe:2.3:o:qualcomm:sdm450_firmware:-:::::::*`
qualcomm	sdm630_firmware	All versions `cpe:2.3:o:qualcomm:sdm630_firmware:-:::::::*`
qualcomm	sdm632_firmware	All versions `cpe:2.3:o:qualcomm:sdm632_firmware:-:::::::*`
qualcomm	sdm636_firmware	All versions `cpe:2.3:o:qualcomm:sdm636_firmware:-:::::::*`
qualcomm	sdm660_firmware	All versions `cpe:2.3:o:qualcomm:sdm660_firmware:-:::::::*`
qualcomm	sdm670_firmware	All versions `cpe:2.3:o:qualcomm:sdm670_firmware:-:::::::*`
qualcomm	sdm710_firmware	All versions `cpe:2.3:o:qualcomm:sdm710_firmware:-:::::::*`
qualcomm	sdm845_firmware	All versions `cpe:2.3:o:qualcomm:sdm845_firmware:-:::::::*`
qualcomm	sdx20_firmware	All versions `cpe:2.3:o:qualcomm:sdx20_firmware:-:::::::*`
qualcomm	sdx24_firmware	All versions `cpe:2.3:o:qualcomm:sdx24_firmware:-:::::::*`
qualcomm	sdx55_firmware	All versions `cpe:2.3:o:qualcomm:sdx55_firmware:-:::::::*`
qualcomm	sm6150_firmware	All versions `cpe:2.3:o:qualcomm:sm6150_firmware:-:::::::*`
qualcomm	sm7150_firmware	All versions `cpe:2.3:o:qualcomm:sm7150_firmware:-:::::::*`
qualcomm	sm8150_firmware	All versions `cpe:2.3:o:qualcomm:sm8150_firmware:-:::::::*`
qualcomm	sm8250_firmware	All versions `cpe:2.3:o:qualcomm:sm8250_firmware:-:::::::*`
qualcomm	sxr1130_firmware	All versions `cpe:2.3:o:qualcomm:sxr1130_firmware:-:::::::*`
qualcomm	sxr2130_firmware	All versions `cpe:2.3:o:qualcomm:sxr2130_firmware:-:::::::*`

Original advisory text

Out of boundary access is possible as there is no validation of data accessed against the received size of the packet in case of malicious firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCN7605, QCS405, QCS605, QM215, SA6155P, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

References

https://www.qualcomm.com/company/product-security/bulletins/december-2019-bullet... Patch Vendor Advisory

Fix within

Internet-facing 3 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker full control (estimated)

Severity

9.8 Critical

Exploitation

<1% chance of attack within 30 days

Type

CWE-787Out-of-bounds Write

Timeline

Published18 Dec 2019

Updated3 Nov 2026

First seen29 Sep 2026

Sources

CVE-2019-10614 · NVD

Track software like this

Free during beta