Vulnetix
Try Vulnetix Request Demo
CVE-2019-14054 PUBLISHED CVSS 7.800000190734863 HIGH

Improper permissions in XBL_SEC region enable user to update XBL_SEC code and data and divert the RAM dump path to normal cold boot path in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Kamorta, MSM8998, QCS404, QCS605, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SM8150, SXR1130, SXR2130

EPSS 0.03% · 6.8th percentile

Risk Scores

CVSS v3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.03%
6.8th percentile

Affected Products

VendorProductVersions
qualcommmsm8998_firmware
qualcommsdm670_firmware
qualcommqcs605_firmware
qualcommsdm850_firmware
qualcommsdm710_firmware
qualcommsdm636_firmware
qualcommsda660_firmware
qualcommsda845_firmware
qualcommsdm630_firmware
qualcommsxr1130_firmware
qualcommsxr2130_firmware
qualcommsm8150_firmware
qualcommkamorta_firmware
qualcommqcs404_firmware
qualcommsdm660_firmware
qualcommsdm845_firmware
Qualcomm, Inc.Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and NetworkingKamorta, MSM8998, QCS404, QCS605, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SM8150, SXR1130, SXR2130

Timeline

References

Open in Interactive Console →