What is CVE-2019-14054?

CVE-2019-14054 is a high-severity vulnerability in Qualcomm Kamorta. CVSS score: 7.8/10. Published 2020-06-02.

How severe is CVE-2019-14054?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Qualcomm Kamorta

CVE-2019-14054

Improper permissions in XBL_SEC region enable user to update XBL_SEC code and data and divert the RAM dump path to normal cold boot path in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Kamorta, MSM8998, QCS404, QCS605, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SM8150, SXR1130, SXR2130

EPSS: 0.002 (10.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Qualcomm Kamorta
Qualcomm Kamorta_firmware
Qualcomm Msm8998
Qualcomm Msm8998_firmware
Qualcomm Qcs404
Qualcomm Qcs404_firmware
Qualcomm Qcs605
Qualcomm Qcs605_firmware
Qualcomm Sda660
Qualcomm Sda660_firmware

References

product-security@qualcomm.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2019-14054?: CVE-2019-14054 is a high-severity vulnerability in Qualcomm Kamorta. CVSS score: 7.8/10. Published 2020-06-02.
How severe is CVE-2019-14054?: High severity. CVSS v3 base score is 7.8 out of 10.