1. Home
  2. CVE Database
  3. CVE-2019-14072
HIGH · 7.0

CVE-2019-14072

Unhandled paging request is observed due to dereferencing an already freed object because of race condition between sparse free and sparse bind ioctls which access the same physical entry in Snapdrago...

Vulnerability Description

Unhandled paging request is observed due to dereferencing an already freed object because of race condition between sparse free and sparse bind ioctls which access the same physical entry in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8096AU, APQ8098, MDM9607, MSM8909W, MSM8939, MSM8953, MSM8996AU, Nicobar, QCS405, QCS605, Rennell, SA6155P, Saipan, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM450, SDM632, SDM670, SDM710, SDM845, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

CVSS Score

7.0

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
QualcommApq8009 Firmware-
QualcommApq8009-
QualcommApq8096Au Firmware-
QualcommApq8096Au-
QualcommApq8098 Firmware-
QualcommApq8098-
QualcommMdm9607 Firmware-
QualcommMdm9607-
QualcommMsm8909W Firmware-
QualcommMsm8909W-
QualcommMsm8939 Firmware-
QualcommMsm8939-
QualcommMsm8953 Firmware-
QualcommMsm8953-
QualcommMsm8996Au Firmware-
QualcommMsm8996Au-
QualcommNicobar Firmware-
QualcommNicobar-
QualcommQcs405 Firmware-
QualcommQcs405-

Related Weaknesses (CWE)

CWE-362CWE-416

References

FAQ

What is CVE-2019-14072?

CVE-2019-14072 is a vulnerability with a CVSS score of 7.0 (HIGH). Unhandled paging request is observed due to dereferencing an already freed object because of race condition between sparse free and sparse bind ioctls which access the same physical entry in Snapdrago...

How severe is CVE-2019-14072?

CVE-2019-14072 has been rated HIGH with a CVSS base score of 7.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-14072?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Apq8009 Firmware, Qualcomm Apq8009, Qualcomm Apq8096Au Firmware, Qualcomm Apq8096Au, Qualcomm Apq8098 Firmware.