CVE-2024-53019

Q: What is the severity of CVE-2024-53019?

CVE-2024-53019 has a CVSS score of 8.2 (HIGH). This vulnerability allows attackers to read sensitive information from memory when processing malformed RTP packets with improper header lengths. It affects systems using Qualcomm chipsets with vulnerable RTP decoding implementations. The information disclosure could expose session data, encryption keys, or other sensitive memory contents.

8.2 HIGH

📋 TL;DR

This vulnerability allows attackers to read sensitive information from memory when processing malformed RTP packets with improper header lengths. It affects systems using Qualcomm chipsets with vulnerable RTP decoding implementations. The information disclosure could expose session data, encryption keys, or other sensitive memory contents.

💻 Affected Systems

Products:

Qualcomm chipsets with RTP processing capabilities

Versions: Specific versions not detailed in reference; check Qualcomm advisory for exact affected versions

Operating Systems: Android, Linux-based systems using Qualcomm chipsets

Default Config Vulnerable: ⚠️ Yes

Notes: Affects devices with RTP processing enabled, typically in VoIP, video conferencing, or streaming applications

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

Complete memory dump exposing encryption keys, authentication tokens, and sensitive application data leading to full system compromise.

🟠

Likely Case

Partial memory disclosure revealing session information, network configuration, or application state data.

🟢

If Mitigated

Limited information exposure with proper memory isolation and access controls in place.

🌐 Internet-Facing: HIGH

🏢 Internal Only: MEDIUM

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ⚠️ Yes

Complexity: MEDIUM

Requires sending specially crafted RTP packets to vulnerable systems

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Check Qualcomm security bulletin for specific patched versions

Vendor Advisory: https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html

Restart Required: Yes

Instructions:

1. Check Qualcomm security bulletin for affected chipset versions. 2. Obtain firmware/software updates from device manufacturer. 3. Apply patches following manufacturer instructions. 4. Reboot affected devices.

🔧 Temporary Workarounds

Network filtering

linux

Block or filter RTP traffic at network boundaries

iptables -A INPUT -p udp --dport 16384:32767 -j DROP

Application control

all

Disable RTP processing in vulnerable applications

🧯 If You Can't Patch

Segment affected systems in isolated network zones
Implement strict network monitoring for RTP traffic anomalies

🔍 How to Verify

Check if Vulnerable:

Check chipset version and compare against Qualcomm advisory; examine if RTP processing is enabled

Check Version:

cat /proc/cpuinfo | grep -i qualcomm

Verify Fix Applied:

Verify firmware/software version matches patched versions in Qualcomm bulletin

📡 Detection & Monitoring

Log Indicators:

Memory access violations
RTP decoding errors
Unexpected process crashes

Network Indicators:

Malformed RTP packets
Unusual RTP traffic patterns
Packets with abnormal header lengths

SIEM Query:

source="network" AND protocol="RTP" AND (header_length>15 OR malformed_packet=true)

📊 Metadata

CVE ID: CVE-2024-53019

CVSS v3 Score: 8.2 (HIGH)

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

CWE: CWE-126

EPSS Score: 0.06% exploit probability (17th percentile)

Published: June 3, 2025

Last Updated: August 20, 2025

🔗 References

https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html Vendor Advisory

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Fastconnect 6200 Firmware by Qualcomm

Fastconnect 6700 Firmware by Qualcomm

Fastconnect 6900 Firmware by Qualcomm

Fastconnect 7800 Firmware by Qualcomm

Qca6310 Firmware by Qualcomm

Qca6320 Firmware by Qualcomm

Qca6696 Firmware by Qualcomm

Qcm4490 Firmware by Qualcomm

Qcs4490 Firmware by Qualcomm

Qmp1000 Firmware by Qualcomm

Sa4150p Firmware by Qualcomm

Sa4155p Firmware by Qualcomm

Sa6155p Firmware by Qualcomm

Sa8155p Firmware by Qualcomm

Sa8195p Firmware by Qualcomm

Sd 8 Gen1 5g Firmware by Qualcomm

Sd835 Firmware by Qualcomm

Sdm429w Firmware by Qualcomm

Sm4635 Firmware by Qualcomm

Sm6650 Firmware by Qualcomm

Sm6650p Firmware by Qualcomm

Sm7635 Firmware by Qualcomm

Sm7675 Firmware by Qualcomm

Sm7675p Firmware by Qualcomm

Sm8550p Firmware by Qualcomm

Sm8635 Firmware by Qualcomm

Sm8635p Firmware by Qualcomm

Sm8650q Firmware by Qualcomm

Sm8735 Firmware by Qualcomm

Sm8750 Firmware by Qualcomm

Sm8750p Firmware by Qualcomm

Snapdragon 4 Gen 1 Mobile Platform Firmware by Qualcomm

Snapdragon 4 Gen 2 Mobile Platform Firmware by Qualcomm

Snapdragon 429 Mobile Platform Firmware by Qualcomm

Snapdragon 480 5g Mobile Platform Firmware by Qualcomm

Snapdragon 480\+ 5g Mobile Platform \(sm4350 Ac\) Firmware by Qualcomm

Snapdragon 695 5g Mobile Platform Firmware by Qualcomm

Snapdragon 8 Gen 1 Mobile Platform Firmware by Qualcomm

Snapdragon 8 Gen 1 Mobile Platform Firmware by Qualcomm

Snapdragon 8 Gen 2 Mobile Platform Firmware by Qualcomm

Snapdragon 8 Gen 2 Mobile Platform Firmware by Qualcomm

Snapdragon 8 Gen 3 Mobile Platform Firmware by Qualcomm

Snapdragon 835 Mobile Pc Platform Firmware by Qualcomm

Snapdragon W5\+ Gen 1 Wearable Platform Firmware by Qualcomm

Sw5100 Firmware by Qualcomm

Sw5100p Firmware by Qualcomm

Talynplus Firmware by Qualcomm

Wcd9335 Firmware by Qualcomm

Wcd9340 Firmware by Qualcomm

Wcd9341 Firmware by Qualcomm

Wcd9370 Firmware by Qualcomm

Wcd9375 Firmware by Qualcomm

Wcd9378 Firmware by Qualcomm

Wcd9380 Firmware by Qualcomm

Wcd9385 Firmware by Qualcomm

Wcd9390 Firmware by Qualcomm

Wcd9395 Firmware by Qualcomm

Wcn3620 Firmware by Qualcomm

Wcn3660b Firmware by Qualcomm

Wcn3680b Firmware by Qualcomm

Wcn3950 Firmware by Qualcomm

Wcn3980 Firmware by Qualcomm

Wcn3988 Firmware by Qualcomm

Wcn3990 Firmware by Qualcomm

Wcn6450 Firmware by Qualcomm

Wcn6650 Firmware by Qualcomm

Wcn6740 Firmware by Qualcomm

Wcn6755 Firmware by Qualcomm

Wcn7750 Firmware by Qualcomm

Wcn7860 Firmware by Qualcomm

Wcn7861 Firmware by Qualcomm

Wcn7880 Firmware by Qualcomm

Wcn7881 Firmware by Qualcomm

Wsa8810 Firmware by Qualcomm

Wsa8815 Firmware by Qualcomm

Wsa8830 Firmware by Qualcomm

Wsa8832 Firmware by Qualcomm