CVEvulnerability
CVE-2019-14088
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-02-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-416
Description
Possible use after free issue while CRM is accessing the link pointer from device private data due to lack of resource protection in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, MDM9206, MDM9207C, MDM9607, QCS605, SDM429W, SDX24, SM8150, SXR1130
Affected configurations
• qualcomm apq8009 firmware
• qualcomm mdm9206 firmware
• qualcomm mdm9207c firmware
• qualcomm mdm9607 firmware
• qualcomm qcs605 firmware
• qualcomm sdm429w firmware
• qualcomm sdx24 firmware
• qualcomm sm8150 firmware
• qualcomm sxr1130 firmware
Related
Weakness · CWE (1)
- CWE-416 Use After Free weakness
References
- https://www.qualcomm.com/company/product-security/bulletins/february-2020-bulletin Patch, Vendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-20-199/ Third Party Advisory, VDB Entry
- https://www.qualcomm.com/company/product-security/bulletins/february-2020-bulletin Patch, Vendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-20-199/ Third Party Advisory, VDB Entry