CVE-2019-10608 - Information disclosure issue occurs as there is no binding between the secure keypad session and the secure display session that allows user to take control of the REE to stop the secure keypad session and read the keypad input

Back Back to CVE browser

MEDIUM

Information disclosure issue occurs as there is no binding between the secure keypad session and the secure display session that allows user to take control of the REE to stop the secure keypad session and read the keypad input

Published Apr 16, 2020

5.5

MEDIUM

CVSS 3.1

EPSS 0.19%

Description

Information disclosure issue occurs as there is no binding between the secure keypad session and the secure display session that allows user to take control of the REE to stop the secure keypad session and read the keypad input. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, MSM8905, MSM8909

Affected products

Vendor Qualcomm, Inc. Product n/a Default
n/a
- Version
  APQ8009, MSM8905, MSM8909
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Qualcomm, Inc.

n/a

Version	Status	Constraints
APQ8009, MSM8905, MSM8909	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-2412
Advisory
https://www.qualcomm.com/company/product-security/bulletins/april-2020-bulletin
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-2412		Advisory
https://www.qualcomm.com/company/product-security/bulletins/april-2020-bulletin		x_refsource_CONFIRMVendor Advisory