CVE-2019-14011

Multiple Read overflows issue due to improper length check while decoding 3G attach accept/ SMS/ pdn connection reject/ esm data transport/ bearer modify…

published April 16, 2020

CVSS
—
EPSS
1%
Percentile
58.6
In the wild
Unconfirmed
What it is

⚠️ Multiple read overflow vulnerabilities lurk in various Snapdragon platforms, stemming from improper length checks! Think of it like a library where the book catalog doesn’t limit how many pages can be borrowed — once you take out too many, the shelves become disorganized and chaotic, leading to confusion and potential mishaps. An attacker with access could exploit this vulnerability to cause unexpected behavior, potentially disrupting services or even accessing sensitive information. Although no known exploits exist, the possibility of these vulnerabilities being leveraged makes it important to address them proactively!

Put simply

Think of it like a library where the book catalog doesn’t limit how many pages can be borrowed — once you take out too many, the shelves become disorganized and chaotic, leading to confusion and potential mishaps. This vulnerability arises from insufficient length checks when decoding various types of data transmissions in affected Snapdragon chipsets, potentially leading to read overflows that can impact system stability.

What to do

An attacker with access could exploit this vulnerability to cause unexpected behavior, potentially disrupting services or even accessing sensitive information. Although no known exploits exist, the possibility of these vulnerabilities being leveraged makes it important to address them proactively! Ensure that your devices are updated to the latest firmware from the manufacturer to mitigate this vulnerability. Additionally, regularly review the security documentation provided by Qualcomm for any new patches or updates regarding these chipsets. You've got this! Stay proactive and secure your devices with these steps! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00876 · 58.6th percentile
Published
2020-04-16T10:46Z
EPSS history
Timeline
  • 16 APR 10:46Z
    Multiple Read overflows issue due to improper length check while decoding 3G attach accept/ SMS/ pdn connection reject/ esm data transport/ bearer modify…
    cvelistv5