CVE-2019-2267

HIGH7.8

Locked regions may be modified through other interfaces in secure boot loader image due to improper access control

Published Jan 21, 2020

Modified 1 years ago

Details

Locked regions may be modified through other interfaces in secure boot loader image due to improper access control. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9205, QCS404, QCS605, SDA845, SDM670, SDM710, SDM845, SDM850, SM8150, SXR1130, SXR2130

References

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2019-2267

WEB

https://www.qualcomm.com/company/product-security/bulletins/january-2020-bulletin

CVSS Analysis

CVSS v3.1

7.8

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Ecosystems

Timeline

PublishedJan 21, 2020

ModifiedAug 4, 2024