CVE-2019-14054

🗓️ 02 Jun 2020 15:05:41Reported by qualcommType

Improper permissions in XBL_SEC enable code updates and RAM dump redirection in multiple Snapdragon platforms.

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-2019-14054	2 Jun 202015:05	–	cvelist
EUVD	EUVD-2019-5311	7 Oct 202500:30	–	euvd
NVD	CVE-2019-14054	2 Jun 202015:15	–	nvd
Prion	Input validation	2 Jun 202015:15	–	prion
RedhatCVE	CVE-2019-14054	22 May 202510:31	–	redhatcve

NVD

Node

qualcomm kamorta_firmwareMatch-

AND

qualcomm kamortaMatch-

Node

qualcomm msm8998_firmwareMatch-

AND

qualcomm msm8998Match-

Node

qualcomm qcs404_firmwareMatch-

AND

qualcomm qcs404Match-

Node

qualcomm qcs605_firmwareMatch-

AND

qualcomm qcs605Match-

Node

qualcomm sda660_firmwareMatch-

AND

qualcomm sda660Match-

Node

qualcomm sda845_firmwareMatch-

AND

qualcomm sda845Match-

Node

qualcomm sdm630_firmwareMatch-

AND

qualcomm sdm630Match-

Node

qualcomm sdm636_firmwareMatch-

AND

qualcomm sdm636Match-

Node

qualcomm sdm660_firmwareMatch-

AND

qualcomm sdm660Match-

Node

qualcomm sdm670_firmwareMatch-

AND

qualcomm sdm670Match-

Node

qualcomm sdm710_firmwareMatch-

AND

qualcomm sdm710Match-

Node

qualcomm sdm845_firmwareMatch-

AND

qualcomm sdm845Match-

Node

qualcomm sdm850_firmwareMatch-

AND

qualcomm sdm850Match-

Node

qualcomm sm8150_firmwareMatch-

AND

qualcomm sm8150Match-

Node

qualcomm sxr1130_firmwareMatch-

AND

qualcomm sxr1130Match-

Node

qualcomm sxr2130_firmwareMatch-

AND

qualcomm sxr2130Match-

[
  {
    "product": "Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "Kamorta, MSM8998, QCS404, QCS605, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SM8150, SXR1130, SXR2130"
      }
    ]
  }
]

Source	Link
qualcomm	www.qualcomm.com/company/product-security/bulletins/may-2020-bulletin

21 Nov 2024 04:25Current

7.7High risk

Vulners AI Score7.7

CVSS 27.2

CVSS 3.17.8

EPSS0.00025