CVSS3
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
Percentile
25.7%
Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Vendor | Product | Version | CPE |
---|---|---|---|
qualcomm | aqt1000_firmware | - | cpe:2.3:o:qualcomm:aqt1000_firmware:-:*:*:*:*:*:*:* |
qualcomm | aqt1000 | - | cpe:2.3:h:qualcomm:aqt1000:-:*:*:*:*:*:*:* |
qualcomm | ar8031_firmware | - | cpe:2.3:o:qualcomm:ar8031_firmware:-:*:*:*:*:*:*:* |
qualcomm | ar8031 | - | cpe:2.3:h:qualcomm:ar8031:-:*:*:*:*:*:*:* |
qualcomm | ar8035_firmware | - | cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:* |
qualcomm | ar8035 | - | cpe:2.3:h:qualcomm:ar8035:-:*:*:*:*:*:*:* |
qualcomm | csra6620_firmware | - | cpe:2.3:o:qualcomm:csra6620_firmware:-:*:*:*:*:*:*:* |
qualcomm | csra6620 | - | cpe:2.3:h:qualcomm:csra6620:-:*:*:*:*:*:*:* |
qualcomm | csra6640_firmware | - | cpe:2.3:o:qualcomm:csra6640_firmware:-:*:*:*:*:*:*:* |
qualcomm | csra6640 | - | cpe:2.3:h:qualcomm:csra6640:-:*:*:*:*:*:*:* |