1. Home
  2. CVE Database
  3. CVE-2019-14091
HIGH · 7.8

CVE-2019-14091

Double free issue in NPU due to lack of resource locking mechanism to avoid race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

Vulnerability Description

Double free issue in NPU due to lack of resource locking mechanism to avoid race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9607, QCS405, Rennell, Saipan, SC8180X, SDX55, SM8150, SM8250, SXR2130

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
QualcommMdm9607 Firmware-
QualcommMdm9607-
QualcommQcs405 Firmware-
QualcommQcs405-
QualcommRennell Firmware-
QualcommRennell-
QualcommSaipan Firmware-
QualcommSaipan-
QualcommSc8180X Firmware-
QualcommSc8180X-
QualcommSdx55 Firmware-
QualcommSdx55-
QualcommSm8150 Firmware-
QualcommSm8150-
QualcommSm8250 Firmware-
QualcommSm8250-
QualcommSxr2130 Firmware-
QualcommSxr2130-

Related Weaknesses (CWE)

CWE-667CWE-415

References

FAQ

What is CVE-2019-14091?

CVE-2019-14091 is a vulnerability with a CVSS score of 7.8 (HIGH). Double free issue in NPU due to lack of resource locking mechanism to avoid race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

How severe is CVE-2019-14091?

CVE-2019-14091 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-14091?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Mdm9607 Firmware, Qualcomm Mdm9607, Qualcomm Qcs405 Firmware, Qualcomm Qcs405, Qualcomm Rennell Firmware.