CVE-2019-14001

—

CVSS 3.1

7.8 high

EPSS

<1%p4

Published

Apr 16, 2020 (Apr 16, 2020)

Modified

Jun 17, 2026

Description

Wrong public key usage from existing oem_keystore for hash generation in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8953, MSM8996AU, QM215, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDX20

Vendors: qualcomm
Products: apq8009 firmware, apq8017 firmware, apq8053 firmware, apq8096au firmware, mdm9206 firmware, mdm9207c firmware, mdm9607 firmware, mdm9650 firmware, msm8905 firmware, msm8909w firmware, msm8917 firmware, msm8953 firmware
Weakness: CWE-327
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news0 stories

No ingested article mentions this CVE yet.