NetSight
medium5.5

CVE-2019-14075

Null pointer dereference issue in radio interface layer due to lack of null check in sapmodule destructor in Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…

Impact

Null pointer dereference issue in radio interface layer due to lack of null check in sapmodule destructor in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9607, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8998, Nicobar, QCS605, Rennell, Saipan, SDM450, SDM630, SDM636, SDM660, SDM670, SDM710, SM6150, SM7150, SM8150, SM8250, SXR2130

Affected products

VendorProductAffected versions
QualcommMdm9607 Firmware
All versions
QualcommMsm8917 Firmware
All versions
QualcommMsm8920 Firmware
All versions
QualcommMsm8937 Firmware
All versions
QualcommMsm8940 Firmware
All versions
QualcommMsm8953 Firmware
All versions
QualcommMsm8998 Firmware
All versions
QualcommNicobar Firmware
All versions
QualcommQcs605 Firmware
All versions
QualcommRennell Firmware
All versions
QualcommSaipan Firmware
All versions
QualcommSdm450 Firmware
All versions

Weakness classification

References