NetSight
high7.8

CVE-2019-14117

u'Whenever the page list is updated via privileged user, the previous list elements are freed but are not deleted from the list which results in a use after fr…

Impact

u'Whenever the page list is updated via privileged user, the previous list elements are freed but are not deleted from the list which results in a use after free causing an unhandled page fault exception in rmnet driver' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in Bitra, MDM9607, QCS405, Saipan, SC8180X, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130

Affected products

VendorProductAffected versions
QualcommBitra Firmware
All versions
QualcommMdm9607 Firmware
All versions
QualcommQcs405 Firmware
All versions
QualcommSaipan Firmware
All versions
QualcommSc8180x Firmware
All versions
QualcommSdx55 Firmware
All versions
QualcommSm6150 Firmware
All versions
QualcommSm7150 Firmware
All versions
QualcommSm8150 Firmware
All versions
QualcommSm8250 Firmware
All versions
QualcommSxr2130 Firmware
All versions

Weakness classification

References