Unrated severityNVD Advisory· Published Apr 16, 2020· Updated Aug 5, 2024

CVE-2019-14001

Description

Wrong public key usage from existing oem_keystore for hash generation in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8953, MSM8996AU, QM215, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDX20

Affected products

Qualcomm/Snapdragon Automobilellm-fuzzy
Qualcomm/Snapdragon Mobilellm-fuzzy
Qualcomm/Snapdragon Consumer IOTllm-fuzzy
Qualcomm/Snapdragon Industrial IOTllm-fuzzy
Qualcomm/Snapdragon Wearllm-fuzzy
Qualcomm/Snapdragon Voice & Musicllm-fuzzy
Qualcomm, Inc./Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearablesv5
Range: APQ8009, APQ8017, APQ8053, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8953, MSM8996AU, QM215, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDX20

Patches

Vulnerability mechanics

References

www.qualcomm.com/company/product-security/bulletins/april-2020-bulletinmitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000