NetSight
IP …
high7.8

CVE-2019-14088

Possible use after free issue while CRM is accessing the link pointer from device private data due to lack of resource protection in Snapdragon Auto, Snapdrago…

Impact

Possible use after free issue while CRM is accessing the link pointer from device private data due to lack of resource protection in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, MDM9206, MDM9207C, MDM9607, QCS605, SDM429W, SDX24, SM8150, SXR1130

Affected products

VendorProductAffected versions
QualcommApq8009 Firmware
All versions
QualcommMdm9206 Firmware
All versions
QualcommMdm9207c Firmware
All versions
QualcommMdm9607 Firmware
All versions
QualcommQcs605 Firmware
All versions
QualcommSdm429w Firmware
All versions
QualcommSdx24 Firmware
All versions
QualcommSm8150 Firmware
All versions
QualcommSxr1130 Firmware
All versions

Weakness classification

CWE-416

References