PT-2020-9521 · Qualcomm · Mdm9206+14

Jianqiang Zhao + 2 · Published 2020-07-30 · Updated 2021-07-21 · CVE-2019-14100

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions (affected versions not specified)

Description: The issue is related to register write via debugfs being disabled by default to prevent unauthorized register writing. This affects various Qualcomm Snapdragon products, including Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, and Snapdragon Voice & Music, in specific chipsets such as MDM9206, MDM9207C, MDM9607, Nicobar, QCS405, SA6155P, SC8180X, SDX55, and SM8150.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2019-14100

Affected Products

Mdm9206

Mdm9207C

Mdm9607

Nicobar

Qcs405

Sa6155P

Sc8180X

Sdx55

Sm8150

Snapdragon Auto

Snapdragon Compute

Snapdragon Consumer Iot

Snapdragon Industrial Iot

Snapdragon Mobile

Snapdragon Voice & Music

References · 4

• https://qualcomm.com/company/product-security/bulletins/july-2020-security-bulletin · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-14100 · Security Note
• https://t.me/cibsecurity/13772 · Telegram Post
• https://qualcomm.com/company/product-security/bulletins/july-2020-bulletin · Note