CVE-2019-14001

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Wrong public key usage from existing oem_keystore for hash generation in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8953, MSM8996AU, QM215, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDX20

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-327

Affected software

No affected versions have been published.

Timeline

Published: Apr 16, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-140027.8APKs without proper permission may bind to CallEnhancementService and can lead to unauthorized access to call status in Snapdragon Auto, Sna CVE-2019-140037.5Null pointer exception can happen while parsing invalid MKV clip where cue information is parsed before segment information in Snapdragon Au CVE-2019-140049.8Buffer overflow occurs while processing invalid MKV clip, which has invalid EBML size in Snapdragon Auto, Snapdragon Compute, Snapdragon Con CVE-2019-140059.8Buffer overflow occur while playing the clip which is nonstandard due to lack of check of size duration in Snapdragon Auto, Snapdragon Compu CVE-2019-140069.8Buffer overflow occur while playing the clip which is nonstandard due to lack of offset length check in Snapdragon Auto, Snapdragon Compute,CVE-2019-140075.5Due to the use of non-time-constant comparison functions there is issue in timing side channels which can be used as a potential side channe CVE-2019-140087.5Possible null pointer dereference issue in location assistance data processing due to missing null check on resources before using it in Sna CVE-2019-140097.8Out of bound memory access while processing TZ command handler due to improper input validation on response length received from user in Sna CVE-2019-140107.5The device may enter into error state when some tool or application gets failure at 1st buffer map all and performs 2nd buffer map which hap CVE-2019-140119.1Multiple Read overflows issue due to improper length check while decoding 3G attach accept/ SMS/ pdn connection reject/ esm data transport/ CVE-2019-140127.5Possibility of null pointer deference as the array of video codecs from media info is referenced without null checking while processing SDP CVE-2019-140139.8While parsing invalid super index table, elements within super index table may exceed total chunk size and invalid data is read into the tab