Skip to content
OpenAdvisories
Unscored CVE-2019-2278 EUVD-2019-11920GHSA-mhq7-486h-2f4f

User keystore signature is ignored in boot and can lead to bypass boot image signature verification in Snapdragon Auto, Snapdragon Consumer…

Published Jul 25, 2019 · Updated Aug 4, 2024 · Assigned by qualcomm

Description

User keystore signature is ignored in boot and can lead to bypass boot image signature verification in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in MDM9607, MDM9640, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 845 / SD 850, SDM660

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile MDM9607, MDM9640, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 845 / SD 850, SDM660 —

References