CVE-2019-14091
Summary
| CVE | CVE-2019-14091 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-06-22 07:15:00 UTC |
| Updated | 2021-07-21 11:39:00 UTC |
| Description | Double free issue in NPU due to lack of resource locking mechanism to avoid race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9607, QCS405, Rennell, Saipan, SC8180X, SDX55, SM8150, SM8250, SXR2130 |
Risk And Classification
Problem Types: CWE-415 | CWE-667
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Qualcomm | Mdm9607 | - | All | All | All |
| Hardware | Qualcomm | Mdm9607 | - | All | All | All |
| Operating System | Qualcomm | Mdm9607 Firmware | - | All | All | All |
| Operating System | Qualcomm | Mdm9607 Firmware | - | All | All | All |
| Hardware | Qualcomm | Qcs405 | - | All | All | All |
| Hardware | Qualcomm | Qcs405 | - | All | All | All |
| Operating System | Qualcomm | Qcs405 Firmware | - | All | All | All |
| Operating System | Qualcomm | Qcs405 Firmware | - | All | All | All |
| Hardware | Qualcomm | Rennell | - | All | All | All |
| Hardware | Qualcomm | Rennell | - | All | All | All |
| Operating System | Qualcomm | Rennell Firmware | - | All | All | All |
| Operating System | Qualcomm | Rennell Firmware | - | All | All | All |
| Hardware | Qualcomm | Saipan | - | All | All | All |
| Hardware | Qualcomm | Saipan | - | All | All | All |
| Operating System | Qualcomm | Saipan Firmware | - | All | All | All |
| Operating System | Qualcomm | Saipan Firmware | - | All | All | All |
| Hardware | Qualcomm | Sc8180x | - | All | All | All |
| Hardware | Qualcomm | Sc8180x | - | All | All | All |
| Operating System | Qualcomm | Sc8180x Firmware | - | All | All | All |
| Operating System | Qualcomm | Sc8180x Firmware | - | All | All | All |
| Hardware | Qualcomm | Sdx55 | - | All | All | All |
| Hardware | Qualcomm | Sdx55 | - | All | All | All |
| Operating System | Qualcomm | Sdx55 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdx55 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sm8150 | - | All | All | All |
| Hardware | Qualcomm | Sm8150 | - | All | All | All |
| Operating System | Qualcomm | Sm8150 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sm8150 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sm8250 | - | All | All | All |
| Hardware | Qualcomm | Sm8250 | - | All | All | All |
| Operating System | Qualcomm | Sm8250 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sm8250 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sxr2130 | - | All | All | All |
| Hardware | Qualcomm | Sxr2130 | - | All | All | All |
| Operating System | Qualcomm | Sxr2130 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sxr2130 Firmware | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| June 2020 Security Bulletin | Qualcomm | MISC | www.qualcomm.com | Vendor Advisory |
| Page not found | CONFIRM | www.qualcomm.com | Broken Link |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.