CVE-2019-2267

🗓️ 21 Jan 2020 06:30:57Reported by qualcommType

Locked regions may be modified in secure boot loader image due to improper access control in various Snapdragon platforms

Reporter	Title	Published	Views	Family All 7
Android Security Bulletins	Android Security Bulletin—January 2020Stay organized with collectionsSave and categorize content based on your preferences.	6 Jan 202000:00	–	androidsecurity
Android Security Bulletins	Pixel Update Bulletin—January 2020Stay organized with collectionsSave and categorize content based on your preferences.	6 Jan 202000:00	–	androidsecurity
Cvelist	CVE-2019-2267	21 Jan 202006:30	–	cvelist
EUVD	EUVD-2019-11909	7 Oct 202500:30	–	euvd
NVD	CVE-2019-2267	21 Jan 202007:15	–	nvd
Prion	Improper access control	21 Jan 202007:15	–	prion
RedhatCVE	CVE-2019-2267	9 Jan 202610:16	–	redhatcve

NVD

Node

qualcomm mdm9205_firmwareMatch-

AND

qualcomm mdm9205Match-

Node

qualcomm qcs404_firmwareMatch-

AND

qualcomm qcs404Match-

Node

qualcomm qcs605_firmwareMatch-

AND

qualcomm qcs605Match-

Node

qualcomm sda845_firmwareMatch-

AND

qualcomm sda845Match-

Node

qualcomm sdm670_firmwareMatch-

AND

qualcomm sdm670Match-

Node

qualcomm sdm710_firmwareMatch-

AND

qualcomm sdm710Match-

Node

qualcomm sdm845_firmwareMatch-

AND

qualcomm sdm845Match-

Node

qualcomm sdm850_firmwareMatch-

AND

qualcomm sdm850Match-

Node

qualcomm sm8150_firmwareMatch-

AND

qualcomm sm8150Match-

Node

qualcomm sxr1130_firmwareMatch-

AND

qualcomm sxr1130Match-

Node

qualcomm sxr2130_firmwareMatch-

AND

qualcomm sxr2130Match-

[
  {
    "product": "Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "MDM9205, QCS404, QCS605, SDA845, SDM670, SDM710, SDM845, SDM850, SM8150, SXR1130, SXR2130"
      }
    ]
  }
]

Source	Link
qualcomm	www.qualcomm.com/company/product-security/bulletins/january-2020-bulletin

21 Nov 2024 04:40Current

8.2High risk

Vulners AI Score8.2

CVSS 27.2

CVSS 3.17.8

EPSS0.00033