Cryptographic key material leaked in debug messages - GERAN in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615,

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• qualcomm mdm9206 firmwareall versions
• qualcomm mdm9607 firmwareall versions
• qualcomm mdm9615 firmwareall versions
• qualcomm mdm9625 firmwareall versions
• qualcomm mdm9635m firmwareall versions
• qualcomm mdm9645 firmwareall versions
• qualcomm mdm9650 firmwareall versions
• qualcomm mdm9655 firmwareall versions
• qualcomm msm8909w firmwareall versions
• qualcomm sd 205 firmwareall versions
• qualcomm sd 210 firmwareall versions
• qualcomm sd 212 firmwareall versions
• qualcomm sd 410 firmwareall versions
• qualcomm sd 412 firmwareall versions
• qualcomm sd 415 firmwareall versions
• qualcomm sd 425 firmwareall versions
• qualcomm sd 427 firmwareall versions
• qualcomm sd 430 firmwareall versions
• qualcomm sd 435 firmwareall versions
• qualcomm sd 450 firmwareall versions

Versions reported by the vendor

Affected version ranges reported by the assigning authority (qualcomm). Independent of NVD's CPE analysis and usually ahead of it.

• Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear

  • MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 800,affected

Other highest-scoring records for the same primary product.

• CVE-2017-14913In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile MDM9206, SD 625, SD 650/52, SD 835, SD 845, DDR address input val
  40Plan
• CVE-2017-14911In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile, Snapdragon Automobile APQ8096AU, MDM9206, MDM9650, MSM8996AU, SD
  40Plan
• CVE-2019-10541Dereference on uninitialized buffer can happen when parsing FLV clip with corrupted codec specific data in Snapdragon Auto, Snapdragon Compu
  39Monitor
• CVE-2019-10534Null-pointer dereference can occur while accessing the super index entry when it is not been allocated in Snapdragon Auto, Snapdragon Comput
  39Monitor
• CVE-2019-10533Out of bound access due to improper validation of array index cause the index table entry to get corrupt in Snapdragon Auto, Snapdragon Comp
  39Monitor
• CVE-2019-10528Use after free issue in kernel while accessing freed mdlog session info and its attributes after closing the session in Snapdragon Auto, Sna
  39Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Root cause

The extension requests broader permissions than its function needs and sends the data it collects out for purposes beyond its stated function.

A representative example of this vulnerability class. Not the vendor's source code; it shows the faulty pattern and its fix.

1{2  "permissions": ["tabs", "<all_urls>"],3  "background": { "service_worker": "analytics.js" }4}

1{2  "permissions": ["activeTab"],3  "host_permissions": ["https://yildiz.example/*"]4}

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.