NetSight
IP …
high7.8

CVE-2019-14091

Double free issue in NPU due to lack of resource locking mechanism to avoid race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Sna…

Impact

Double free issue in NPU due to lack of resource locking mechanism to avoid race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9607, QCS405, Rennell, Saipan, SC8180X, SDX55, SM8150, SM8250, SXR2130

Affected products

VendorProductAffected versions
QualcommMdm9607 Firmware
All versions
QualcommQcs405 Firmware
All versions
QualcommRennell Firmware
All versions
QualcommSaipan Firmware
All versions
QualcommSc8180x Firmware
All versions
QualcommSdx55 Firmware
All versions
QualcommSm8150 Firmware
All versions
QualcommSm8250 Firmware
All versions
QualcommSxr2130 Firmware
All versions

Weakness classification

CWE-415CWE-667

References