Skip to main content

Mdm9205 Firmware CVE-2019-2294

CRITICAL
Use of Insufficiently Random Values (CWE-330)
2019-09-30 product-security@qualcomm.com
Qualcomm Information Disclosure Mdm9205 Firmware Mdm9206 Firmware Mdm9607 Firmware Mdm9615 Firmware Mdm9625 Firmware Mdm9635M Firmware Mdm9655 Firmware Msm8909W Firmware Msm8996au Firmware Qcs605 Firmware Qualcomm 215 Firmware Sd 210 Firmware Sd 212 Firmware Sd 205 Firmware Sd 410 Firmware Sd 412 Firmware Sd 425 Firmware Sd 427 Firmware Sd 430 Firmware Sd 435 Firmware Sd 439 Firmware Sd 429 Firmware Sd 450 Firmware Sd 625 Firmware Sd 632 Firmware Sd 636 Firmware Sd 650 Firmware Sd 652 Firmware Sd 665 Firmware Sd 675 Firmware Sd 712 Firmware Sd 710 Firmware Sd 670 Firmware Sd 730 Firmware Sd 820 Firmware Sd 820A Firmware Sd 835 Firmware Sd 845 Firmware Sd 850 Firmware Sd 855 Firmware Sd 8cx Firmware Sda660 Firmware Sdm439 Firmware Sdm630 Firmware Sdm660 Firmware Snapdragon High Med 2016 Firmware Sxr1130 Firmware
9.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
9.8 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Sep 30, 2019 - 16:15 nvd
CRITICAL 9.8

DescriptionNVD

Usage of hard-coded magic number for calculating heap guard bytes can allow users to corrupt heap blocks without heap algorithm knowledge in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9655, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130

AnalysisAI

Usage of hard-coded magic number for calculating heap guard bytes can allow users to corrupt heap blocks without heap algorithm knowledge in Snapdragon Auto, Snapdragon Compute, Snapdragon. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-330. Usage of hard-coded magic number for calculating heap guard bytes can allow users to corrupt heap blocks without heap algorithm knowledge in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9655, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130 Affected products include: Qualcomm Mdm9205 Firmware, Qualcomm Mdm9206 Firmware, Qualcomm Mdm9607 Firmware, Qualcomm Mdm9615 Firmware, Qualcomm Mdm9625 Firmware.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Mdm9205 Firmware

View all
CVE-2022-25727 CRITICAL
9.8 Nov 15

Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon
CVE-2022-25674 CRITICAL
9.8 Nov 15

Cryptographic issues in WLAN during the group key handshake of the WPA/WPA2 protocol in Snapdragon Consumer IOT, Snapdra
CVE-2022-25718 CRITICAL
9.8 Oct 19

Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Sna
CVE-2021-1975 CRITICAL
9.8 Nov 12

Possible heap overflow due to improper length check of domain while parsing the DNS response in Snapdragon Auto, Snapdra
CVE-2021-1920 CRITICAL
9.8 Sep 08

Integer underflow can occur due to improper handling of incoming RTCP packets in Snapdragon Auto, Snapdragon Compute, Sn
CVE-2021-1916 CRITICAL
9.8 Sep 08

Possible buffer underflow due to lack of check for negative indices values when processing user provided input in Snapdr
CVE-2019-10516 CRITICAL
9.8 Dec 18

Multiple read overflows in MM while decoding service accept,service reject,attach reject and MT detach in Snapdragon Aut
CVE-2019-10500 CRITICAL
9.8 Dec 18

While processing MT Secondary PDP request, Buffer overflow will happen due to incorrect calculation of buffer size in Sn
CVE-2019-10487 CRITICAL
9.8 Dec 18

Buffer over read can happen while parsing SMS OTA messages at transport layer if network sends un-intended values in Sna
CVE-2019-2320 CRITICAL
9.8 Dec 12

Possible out of bounds write in a MT SMS/SS scenario due to improper validation of array index in Snapdragon Auto, Snapd
CVE-2019-10511 CRITICAL
9.8 Dec 12

Possibility of memory overflow while decoding GSNDCP compressed mode PDU in Snapdragon Auto, Snapdragon Compute, Snapdra
CVE-2019-2303 CRITICAL
9.8 Nov 21

SNDCP module may access array out side its boundary when it receives malformed XID message. Rated critical severity (CVS

Same weakness CWE-330 – Use of Insufficiently Random Values

View all
CVE-2017-6026 CRITICAL POC
9.1
CVE-2022-36536 CRITICAL POC
9.8
CVE-2026-27637 CRITICAL POC
9.8
CVE-2022-44938 CRITICAL POC
9.8
CVE-2022-22922 CRITICAL POC
9.8
CVE-2021-41694 CRITICAL POC
9.8
CVE-2021-28024 CRITICAL POC
9.8
CVE-2021-27200 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2019-2294 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy