CVEvulnerability
CVE-2019-14091
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-06-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-415, CWE-667
Description
Double free issue in NPU due to lack of resource locking mechanism to avoid race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9607, QCS405, Rennell, Saipan, SC8180X, SDX55, SM8150, SM8250, SXR2130
Affected configurations
• qualcomm mdm9607 firmware
• qualcomm qcs405 firmware
• qualcomm rennell firmware
• qualcomm saipan firmware
• qualcomm sc8180x firmware
• qualcomm sdx55 firmware
• qualcomm sm8150 firmware
• qualcomm sm8250 firmware
• qualcomm sxr2130 firmware