1. Home
  2. CVE Database
  3. CVE-2019-10562
HIGH · 7.8

CVE-2019-10562

u'Improper authentication and signature verification of debug polices in secure boot loader will allow unverified debug policies to be loaded into secure memory and leads to memory corruption' in Snap...

Vulnerability Description

u'Improper authentication and signature verification of debug polices in secure boot loader will allow unverified debug policies to be loaded into secure memory and leads to memory corruption' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ6018, Kamorta, MSM8998, Nicobar, QCS404, QCS605, QCS610, Rennell, SA415M, SA6155P, SC7180, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
QualcommIpq6018 Firmware-
QualcommIpq6018-
QualcommKamorta Firmware-
QualcommKamorta-
QualcommMsm8998 Firmware-
QualcommMsm8998-
QualcommNicobar Firmware-
QualcommNicobar-
QualcommQcs404 Firmware-
QualcommQcs404-
QualcommQcs605 Firmware-
QualcommQcs605-
QualcommQcs610 Firmware-
QualcommQcs610-
QualcommRennell Firmware-
QualcommRennell-
QualcommSa415M Firmware-
QualcommSa415M-
QualcommSa6155P Firmware-
QualcommSa6155P-

Related Weaknesses (CWE)

CWE-287CWE-347

References

FAQ

What is CVE-2019-10562?

CVE-2019-10562 is a vulnerability with a CVSS score of 7.8 (HIGH). u'Improper authentication and signature verification of debug polices in secure boot loader will allow unverified debug policies to be loaded into secure memory and leads to memory corruption' in Snap...

How severe is CVE-2019-10562?

CVE-2019-10562 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-10562?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Ipq6018 Firmware, Qualcomm Ipq6018, Qualcomm Kamorta Firmware, Qualcomm Kamorta, Qualcomm Msm8998 Firmware.