NetSight
high7.0

CVE-2019-14070

Possible use after free issue in pcm volume controls due to race condition exist in private data used in mixer controls in Snapdragon Auto, Snapdragon Compute,…

Impact

Possible use after free issue in pcm volume controls due to race condition exist in private data used in mixer controls in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, IPQ4019, IPQ6018, IPQ8064, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9615, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCS605, QM215, Rennell, SA6155P, Saipan, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Affected products

VendorProductAffected versions
QualcommApq8009 Firmware
All versions
QualcommApq8017 Firmware
All versions
QualcommApq8053 Firmware
All versions
QualcommApq8064 Firmware
All versions
QualcommApq8096au Firmware
All versions
QualcommApq8098 Firmware
All versions
QualcommIpq4019 Firmware
All versions
QualcommIpq6018 Firmware
All versions
QualcommIpq8064 Firmware
All versions
QualcommIpq8074 Firmware
All versions
QualcommMdm9206 Firmware
All versions
QualcommMdm9207c Firmware
All versions

Weakness classification

References