Published: 02/06/2020 Updated: 03/06/2020

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 641

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Improper permissions in XBL_SEC region enable user to update XBL_SEC code and data and divert the RAM dump path to normal cold boot path in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Kamorta, MSM8998, QCS404, QCS605, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SM8150, SXR1130, SXR2130

Vulnerable Product	Search on Vulmon	Subscribe to Product
qualcomm kamorta_firmware -
qualcomm msm8998_firmware -
qualcomm qcs404_firmware -
qualcomm qcs605_firmware -
qualcomm sda660_firmware -
qualcomm sda845_firmware -
qualcomm sdm630_firmware -
qualcomm sdm636_firmware -
qualcomm sdm660_firmware -
qualcomm sdm670_firmware -
qualcomm sdm710_firmware -
qualcomm sdm845_firmware -
qualcomm sdm850_firmware -
qualcomm sm8150_firmware -
qualcomm sxr1130_firmware -
qualcomm sxr2130_firmware -

NVD-CWE-Other https://www.qualcomm.com/company/product-security/bulletins/may-2020-bulletin https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2019-14054

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect