ghsa-mhq7-486h-2f4f
Vulnerability from github
Published
2022-05-24 16:51
Modified
2022-05-24 16:51
Details
User keystore signature is ignored in boot and can lead to bypass boot image signature verification in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in MDM9607, MDM9640, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 845 / SD 850, SDM660
{ "affected": [], "aliases": [ "CVE-2019-2278" ], "database_specific": { "cwe_ids": [], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2019-07-25T17:15:00Z", "severity": "HIGH" }, "details": "User keystore signature is ignored in boot and can lead to bypass boot image signature verification in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in MDM9607, MDM9640, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 845 / SD 850, SDM660", "id": "GHSA-mhq7-486h-2f4f", "modified": "2022-05-24T16:51:24Z", "published": "2022-05-24T16:51:24Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-2278" }, { "type": "WEB", "url": "https://www.codeaurora.org/security-bulletin/2019/07/01/july-2019-code-aurora-security-bulletin" } ], "schema_version": "1.4.0", "severity": [] }
Loading...