7.8

CVE-2019-14001

Wrong public key usage from existing oem_keystore for hash generation in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8953, MSM8996AU, QM215, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDX20
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Apq8009 Firmware Version -
   Qualcomm ≫ Apq8009 Version -
Qualcomm ≫ Apq8017 Firmware Version -
   Qualcomm ≫ Apq8017 Version -
Qualcomm ≫ Apq8053 Firmware Version -
   Qualcomm ≫ Apq8053 Version -
Qualcomm ≫ Apq8096au Firmware Version -
   Qualcomm ≫ Apq8096au Version -
Qualcomm ≫ Mdm9206 Firmware Version -
   Qualcomm ≫ Mdm9206 Version -
Qualcomm ≫ Mdm9207c Firmware Version -
   Qualcomm ≫ Mdm9207c Version -
Qualcomm ≫ Mdm9607 Firmware Version -
   Qualcomm ≫ Mdm9607 Version -
Qualcomm ≫ Mdm9650 Firmware Version -
   Qualcomm ≫ Mdm9650 Version -
Qualcomm ≫ Msm8905 Firmware Version -
   Qualcomm ≫ Msm8905 Version -
Qualcomm ≫ Msm8909w Firmware Version -
   Qualcomm ≫ Msm8909w Version -
Qualcomm ≫ Msm8917 Firmware Version -
   Qualcomm ≫ Msm8917 Version -
Qualcomm ≫ Msm8953 Firmware Version -
   Qualcomm ≫ Msm8953 Version -
Qualcomm ≫ Msm8996au Firmware Version -
   Qualcomm ≫ Msm8996au Version -
Qualcomm ≫ Qm215 Firmware Version -
   Qualcomm ≫ Qm215 Version -
Qualcomm ≫ Sdm429 Firmware Version -
   Qualcomm ≫ Sdm429 Version -
Qualcomm ≫ Sdm429w Firmware Version -
   Qualcomm ≫ Sdm429w Version -
Qualcomm ≫ Sdm439 Firmware Version -
   Qualcomm ≫ Sdm439 Version -
Qualcomm ≫ Sdm450 Firmware Version -
   Qualcomm ≫ Sdm450 Version -
Qualcomm ≫ Sdm630 Firmware Version -
   Qualcomm ≫ Sdm630 Version -
Qualcomm ≫ Sdm632 Firmware Version -
   Qualcomm ≫ Sdm632 Version -
Qualcomm ≫ Sdm636 Firmware Version -
   Qualcomm ≫ Sdm636 Version -
Qualcomm ≫ Sdm660 Firmware Version -
   Qualcomm ≫ Sdm660 Version -
Qualcomm ≫ Sdx20 Firmware Version -
   Qualcomm ≫ Sdx20 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.15% 0.045
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
CWE-327 Use of a Broken or Risky Cryptographic Algorithm

The product uses a broken or risky cryptographic algorithm or protocol.

https://www.qualcomm.com/company/product-security/bulletins/april-2020-bulletin
Patch
Vendor Advisory