CVE-2019-14001: High severity Google Android vulnerability
Wrong public key usage from existing oemkeystore for hash generation in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8953, MSM8996AU, QM215, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDX20
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-14001?
CVE-2019-14001 has a high severity rating due to its potential impact on the cryptographic functions of affected devices.
How do I fix CVE-2019-14001?
To fix CVE-2019-14001, update the Qualcomm firmware to a version that addresses the vulnerability.
Which devices are affected by CVE-2019-14001?
CVE-2019-14001 affects multiple Snapdragon products including APQ8009, APQ8017, and various Qualcomm modem firmware.
What types of attacks are possible due to CVE-2019-14001?
Exploitation of CVE-2019-14001 could lead to manipulation of secure authentication processes and unauthorized access.
Is there a workaround for CVE-2019-14001?
There are no known workarounds for CVE-2019-14001; the best mitigation is to apply the firmware updates provided by Qualcomm.