Vulnetix
Try Vulnetix Request Demo
CVE-2019-14001 PUBLISHED CVSS 7.800000190734863 HIGH

Wrong public key usage from existing oem_keystore for hash generation in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8953, MSM8996AU, QM215, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDX20

EPSS 0.02% · 5.3th percentile

Risk Scores

CVSS v3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.02%
5.3th percentile

Affected Products

VendorProductVersions
qualcommmdm9206_firmware
qualcommqm215_firmware
qualcommapq8096au_firmware
qualcommsdm636_firmware
qualcommapq8053_firmware
qualcommmdm9607_firmware
qualcommsdm450_firmware
qualcommsdm439_firmware
qualcommmsm8905_firmware
qualcommmsm8917_firmware
qualcommsdm429_firmware
qualcommmsm8909w_firmware
qualcommsdm429w_firmware
qualcommsdm630_firmware
qualcommsdm660_firmware
qualcommmdm9207c_firmware
qualcommmdm9650_firmware
qualcommapq8017_firmware
qualcommsdx20_firmware
qualcommmsm8953_firmware

…and 4 more

Timeline

References

Open in Interactive Console →