CVEvulnerability

CVE-2019-14001

7.8 HIGH Published 2020-04-16 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-04-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-327

Description

Wrong public key usage from existing oem_keystore for hash generation in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8953, MSM8996AU, QM215, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDX20

Affected configurations

• qualcomm apq8009 firmware • qualcomm apq8017 firmware • qualcomm apq8053 firmware • qualcomm apq8096au firmware • qualcomm mdm9206 firmware • qualcomm mdm9207c firmware • qualcomm mdm9607 firmware • qualcomm mdm9650 firmware • qualcomm msm8905 firmware • qualcomm msm8909w firmware • qualcomm msm8917 firmware • qualcomm msm8953 firmware • qualcomm msm8996au firmware • qualcomm qm215 firmware • qualcomm sdm429 firmware • qualcomm sdm429w firmware • qualcomm sdm439 firmware • qualcomm sdm450 firmware • qualcomm sdm630 firmware • qualcomm sdm632 firmware • qualcomm sdm636 firmware • qualcomm sdm660 firmware • qualcomm sdx20 firmware

Related

Weakness · CWE (1)

  • CWE-327 Use of a Broken or Risky Cryptographic Algorithm weakness

References