CVE-2019-2278
Summary
| CVE | CVE-2019-2278 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-07-25 17:15:00 UTC |
| Updated | 2020-08-24 17:37:00 UTC |
| Description | User keystore signature is ignored in boot and can lead to bypass boot image signature verification in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in MDM9607, MDM9640, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 845 / SD 850, SDM660 |
Risk And Classification
Problem Types: CWE-347
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Qualcomm | Mdm9607 | - | All | All | All |
| Hardware | Qualcomm | Mdm9607 | - | All | All | All |
| Operating System | Qualcomm | Mdm9607 Firmware | - | All | All | All |
| Operating System | Qualcomm | Mdm9607 Firmware | - | All | All | All |
| Hardware | Qualcomm | Mdm9640 | - | All | All | All |
| Hardware | Qualcomm | Mdm9640 | - | All | All | All |
| Operating System | Qualcomm | Mdm9640 Firmware | - | All | All | All |
| Operating System | Qualcomm | Mdm9640 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sdm660 | - | All | All | All |
| Hardware | Qualcomm | Sdm660 | - | All | All | All |
| Operating System | Qualcomm | Sdm660 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdm660 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 425 | - | All | All | All |
| Hardware | Qualcomm | Sd 425 | - | All | All | All |
| Operating System | Qualcomm | Sd 425 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 425 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 427 | - | All | All | All |
| Hardware | Qualcomm | Sd 427 | - | All | All | All |
| Operating System | Qualcomm | Sd 427 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 427 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 430 | - | All | All | All |
| Hardware | Qualcomm | Sd 430 | - | All | All | All |
| Operating System | Qualcomm | Sd 430 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 430 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 435 | - | All | All | All |
| Hardware | Qualcomm | Sd 435 | - | All | All | All |
| Operating System | Qualcomm | Sd 435 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 435 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 450 | - | All | All | All |
| Hardware | Qualcomm | Sd 450 | - | All | All | All |
| Operating System | Qualcomm | Sd 450 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 450 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 625 | - | All | All | All |
| Hardware | Qualcomm | Sd 625 | - | All | All | All |
| Operating System | Qualcomm | Sd 625 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 625 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 636 | - | All | All | All |
| Hardware | Qualcomm | Sd 636 | - | All | All | All |
| Operating System | Qualcomm | Sd 636 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 636 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 670 | - | All | All | All |
| Hardware | Qualcomm | Sd 670 | - | All | All | All |
| Operating System | Qualcomm | Sd 670 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 670 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 710 | - | All | All | All |
| Hardware | Qualcomm | Sd 710 | - | All | All | All |
| Operating System | Qualcomm | Sd 710 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 710 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 712 | - | All | All | All |
| Hardware | Qualcomm | Sd 712 | - | All | All | All |
| Operating System | Qualcomm | Sd 712 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 712 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 845 | - | All | All | All |
| Hardware | Qualcomm | Sd 845 | - | All | All | All |
| Operating System | Qualcomm | Sd 845 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 845 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 850 | - | All | All | All |
| Hardware | Qualcomm | Sd 850 | - | All | All | All |
| Operating System | Qualcomm | Sd 850 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 850 Firmware | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| July 2019 Code Aurora Security Bulletin - Code Aurora | CONFIRM | www.codeaurora.org | Patch, Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.