{"id":"CVE-2019-10636","aliases":["EUVD-2019-2440","GHSA-3cff-rx64-jq4x"],"status":"published","title":"Marvell SSD Controller (88SS1074, 88SS1079, 88SS1080, 88SS1093, 88SS1092, 88SS1095, 88SS9174,...","description":"Marvell SSD Controller (88SS1074, 88SS1079, 88SS1080, 88SS1093, 88SS1092, 88SS1095, 88SS9174, 88SS9175, 88SS9187, 88SS9188, 88SS9189, 88SS9190, 88SS1085, 88SS1087, 88SS1090, 88SS1100, 88SS1084, 88SS1088, \u0026 88SS1098) devices allow reprogramming flash memory to bypass the secure boot protection mechanism.","severity":{"version":"3.0","score":4.6,"vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00349,"percentile":0.28794,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-400"],"published":"2019-06-04T20:42:52Z","modified":"2026-06-17T02:11:24Z","products":[{"vendor":"marvell","product":"88ss1074_firmware"},{"vendor":"marvell","product":"88ss1079_firmware"},{"vendor":"marvell","product":"88ss1080_firmware"},{"vendor":"marvell","product":"88ss1084_firmware"},{"vendor":"marvell","product":"88ss1085_firmware"},{"vendor":"marvell","product":"88ss1087_firmware"},{"vendor":"marvell","product":"88ss1088_firmware"},{"vendor":"marvell","product":"88ss1090_firmware"},{"vendor":"marvell","product":"88ss1092_firmware"},{"vendor":"marvell","product":"88ss1093_firmware"},{"vendor":"marvell","product":"88ss1095_firmware"},{"vendor":"marvell","product":"88ss1098_firmware"},{"vendor":"marvell","product":"88ss1100_firmware"},{"vendor":"marvell","product":"88ss9174_firmware"},{"vendor":"marvell","product":"88ss9175_firmware"},{"vendor":"marvell","product":"88ss9187_firmware"},{"vendor":"marvell","product":"88ss9188_firmware"},{"vendor":"marvell","product":"88ss9189_firmware"},{"vendor":"marvell","product":"88ss9190_firmware"}],"references":[{"url":"https://www.marvell.com/documents/x9g4hrszt5ls3udbe1eo/","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10636"},{"url":"https://github.com/advisories/GHSA-3cff-rx64-jq4x"}],"sources":{"cve":[{"id":"CVE-2019-10636","description":"Marvell SSD Controller (88SS1074, 88SS1079, 88SS1080, 88SS1093, 88SS1092, 88SS1095, 88SS9174, 88SS9175, 88SS9187, 88SS9188, 88SS9189, 88SS9190, 88SS1085, 88SS1087, 88SS1090, 88SS1100, 88SS1084, 88SS1088, \u0026 88SS1098) devices allow reprogramming flash memory to bypass the secure boot protection mechanism.","status":"published","published":"2019-06-04T20:42:52Z","modified":"2024-08-04T22:31:59.918Z","updated_at":"2026-11-02T14:20:19.399352Z"}],"euvd":[{"id":"EUVD-2019-2440","description":"Marvell SSD Controller (88SS1074, 88SS1079, 88SS1080, 88SS1093, 88SS1092, 88SS1095, 88SS9174, 88SS9175, 88SS9187, 88SS9188, 88SS9189, 88SS9190, 88SS1085, 88SS1087, 88SS1090, 88SS1100, 88SS1084, 88SS1088, \u0026 88SS1098) devices allow reprogramming flash memory to bypass the secure boot protection mechanism.","status":"published","published":"2019-06-04T20:42:52Z","modified":"2024-08-04T22:31:59Z","updated_at":"2026-11-03T02:40:51.633398Z"}],"ghsa":[{"id":"GHSA-3cff-rx64-jq4x","title":"Marvell SSD Controller (88SS1074, 88SS1079, 88SS1080, 88SS1093, 88SS1092, 88SS1095, 88SS9174,...","description":"Marvell SSD Controller (88SS1074, 88SS1079, 88SS1080, 88SS1093, 88SS1092, 88SS1095, 88SS9174, 88SS9175, 88SS9187, 88SS9188, 88SS9189, 88SS9190, 88SS1085, 88SS1087, 88SS1090, 88SS1100, 88SS1084, 88SS1088, \u0026 88SS1098) devices allow reprogramming flash memory to bypass the secure boot protection mechanism.","status":"published","published":"2022-05-24T16:47:09Z","modified":"2023-01-28T05:05:55Z","updated_at":"2026-11-02T14:44:23.373796Z"}],"nvd":[{"id":"CVE-2019-10636","description":"Marvell SSD Controller (88SS1074, 88SS1079, 88SS1080, 88SS1093, 88SS1092, 88SS1095, 88SS9174, 88SS9175, 88SS9187, 88SS9188, 88SS9189, 88SS9190, 88SS1085, 88SS1087, 88SS1090, 88SS1100, 88SS1084, 88SS1088, \u0026 88SS1098) devices allow reprogramming flash memory to bypass the secure boot protection mechanism.","status":"published","published":"2019-06-04T21:29:00.733Z","modified":"2026-06-17T02:11:24.76Z","cvss":[{"version":"3.0","score":4.6,"vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.9,"vector":"AV:L/AC:L/Au:N/C:N/I:C/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:05:16.285679Z"}]}}
