High severity · published Apr 16, 2020
CVE-2019-14116
Privilege escalation by using an altered debug policy image can occur as the XPU protecting the debug policy regions are disabled during the crash dump boot flow in Snapdragon…
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
Privilege escalation by using an altered debug policy image can occur as the XPU protecting the debug policy regions are disabled during the crash dump boot flow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ6018
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 9% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IF
Ipq6018 Firmware · Qualcomm
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-14116
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-14116
Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/april-2020-bulletin
More from Ipq6018 Firmware
7.8
CVE-2023-33063
Use After Free in DSP Services
9.8
CVE-2024-49839
Buffer Over-read in WLAN Host Cmn
9.8
CVE-2024-45569
Improper Validation of Array Index in WLAN Host Communication
9.8
CVE-2024-33066
Improper Input Validation in WLAN Resource Manager
9.8
CVE-2024-21473
Memory corruption while redirecting log file to any file location with any file name