CVEvulnerability

CVE-2019-2267

7.8 HIGH Published 2020-01-21 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-01-21
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C

Description

Locked regions may be modified through other interfaces in secure boot loader image due to improper access control. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9205, QCS404, QCS605, SDA845, SDM670, SDM710, SDM845, SDM850, SM8150, SXR1130, SXR2130

Affected configurations

• qualcomm mdm9205 firmware • qualcomm qcs404 firmware • qualcomm qcs605 firmware • qualcomm sda845 firmware • qualcomm sdm670 firmware • qualcomm sdm710 firmware • qualcomm sdm845 firmware • qualcomm sdm850 firmware • qualcomm sm8150 firmware • qualcomm sxr1130 firmware • qualcomm sxr2130 firmware

Related

Referenced by CWE · observed example (1)

  • CWE-1274 Improper Access Control for Volatile Memory Containing Boot Code weakness

References