CVEvulnerability
CVE-2019-14024
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-01-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-416
Description
Possible stack-use-after-scope issue in NFC usecase for card emulation in Snapdragon Auto, Snapdragon Industrial IOT, Snapdragon Mobile in MSM8917, MSM8953, Nicobar, QM215, Rennell, SDM429, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SM6150, SM7150, SM8150, SM8250, SXR2130
Affected configurations
• qualcomm msm8917 firmware
• qualcomm msm8953 firmware
• qualcomm nicobar firmware
• qualcomm qm215 firmware
• qualcomm rennell firmware
• qualcomm sdm429 firmware
• qualcomm sdm439 firmware
• qualcomm sdm450 firmware
• qualcomm sdm632 firmware
• qualcomm sdm670 firmware
• qualcomm sdm710 firmware
• qualcomm sdm845 firmware
• qualcomm sm6150 firmware
• qualcomm sm7150 firmware
• qualcomm sm8150 firmware
• qualcomm sm8250 firmware
• qualcomm sxr2130 firmware
Related
Weakness · CWE (1)
- CWE-416 Use After Free weakness
References
- https://www.qualcomm.com/company/product-security/bulletins/january-2020-bulletin Patch, Vendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins/january-2020-bulletin Patch, Vendor Advisory