Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

APKs without proper permission may bind to CallEnhancementService and can lead to unauthorized access to call status in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Indu...

CVE-2019-14002 · published 6 years ago
Summary

APKs without proper permission may bind to CallEnhancementService and can lead to unauthorized access to call status in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8053, APQ8096AU, APQ8098, MSM8909W, MSM8917, ...

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
qualcomm apq8053_firmware All versions
cpe:2.3:o:qualcomm:apq8053_firmware:-:*:*:*:*:*:*:*
qualcomm apq8096au_firmware All versions
cpe:2.3:o:qualcomm:apq8096au_firmware:-:*:*:*:*:*:*:*
qualcomm apq8098_firmware All versions
cpe:2.3:o:qualcomm:apq8098_firmware:-:*:*:*:*:*:*:*
qualcomm msm8909w_firmware All versions
cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*
qualcomm msm8917_firmware All versions
cpe:2.3:o:qualcomm:msm8917_firmware:-:*:*:*:*:*:*:*
qualcomm msm8920_firmware All versions
cpe:2.3:o:qualcomm:msm8920_firmware:-:*:*:*:*:*:*:*
qualcomm msm8937_firmware All versions
cpe:2.3:o:qualcomm:msm8937_firmware:-:*:*:*:*:*:*:*
qualcomm msm8940_firmware All versions
cpe:2.3:o:qualcomm:msm8940_firmware:-:*:*:*:*:*:*:*
qualcomm msm8953_firmware All versions
cpe:2.3:o:qualcomm:msm8953_firmware:-:*:*:*:*:*:*:*
qualcomm msm8996au_firmware All versions
cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*
qualcomm nicobar_firmware All versions
cpe:2.3:o:qualcomm:nicobar_firmware:-:*:*:*:*:*:*:*
qualcomm qca6574au_firmware All versions
cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*
qualcomm qcs605_firmware All versions
cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*
qualcomm qm215_firmware All versions
cpe:2.3:o:qualcomm:qm215_firmware:-:*:*:*:*:*:*:*
qualcomm sa6155p_firmware All versions
cpe:2.3:o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*
qualcomm sda660_firmware All versions
cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*
qualcomm sdm429_firmware All versions
cpe:2.3:o:qualcomm:sdm429_firmware:-:*:*:*:*:*:*:*
qualcomm sdm429w_firmware All versions
cpe:2.3:o:qualcomm:sdm429w_firmware:-:*:*:*:*:*:*:*
qualcomm sdm439_firmware All versions
cpe:2.3:o:qualcomm:sdm439_firmware:-:*:*:*:*:*:*:*
qualcomm sdm450_firmware All versions
cpe:2.3:o:qualcomm:sdm450_firmware:-:*:*:*:*:*:*:*
qualcomm sdm630_firmware All versions
cpe:2.3:o:qualcomm:sdm630_firmware:-:*:*:*:*:*:*:*
qualcomm sdm632_firmware All versions
cpe:2.3:o:qualcomm:sdm632_firmware:-:*:*:*:*:*:*:*
qualcomm sdm636_firmware All versions
cpe:2.3:o:qualcomm:sdm636_firmware:-:*:*:*:*:*:*:*
qualcomm sdm660_firmware All versions
cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*
qualcomm sdm845_firmware All versions
cpe:2.3:o:qualcomm:sdm845_firmware:-:*:*:*:*:*:*:*
qualcomm sm6150_firmware All versions
cpe:2.3:o:qualcomm:sm6150_firmware:-:*:*:*:*:*:*:*
qualcomm sm8150_firmware All versions
cpe:2.3:o:qualcomm:sm8150_firmware:-:*:*:*:*:*:*:*
qualcomm sm8250_firmware All versions
cpe:2.3:o:qualcomm:sm8250_firmware:-:*:*:*:*:*:*:*
qualcomm sxr2130_firmware All versions
cpe:2.3:o:qualcomm:sxr2130_firmware:-:*:*:*:*:*:*:*
Original advisory text
APKs without proper permission may bind to CallEnhancementService and can lead to unauthorized access to call status in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Indu...
APKs without proper permission may bind to CallEnhancementService and can lead to unauthorized access to call status in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8053, APQ8096AU, APQ8098, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, Nicobar, QCA6574AU, QCS605, QM215, SA6155P, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SM6150, SM8150, SM8250, SXR2130
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
7.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-276Incorrect Default Permissions
Timeline
Published7 Feb 2020
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2019-14002 · NVD
Track software like this
Free during beta