CVE-2019-14008 PUBLISHED CVSS 7.5 HIGH

Possible null pointer dereference issue in location assistance data processing due to missing null check on resources before using it in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9607, MDM9650, SDM660, SDM845, SM8150, SM8250, SXR2130

EPSS 0.25% · 47.7th percentile

Risk Scores

CVSS v3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.25%
47.7th percentile

Affected Products

VendorProductVersions
qualcommsxr2130_firmware
qualcommsdm660_firmware
qualcommmdm9650_firmware
qualcommsdm845_firmware
Qualcomm, Inc.Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon MobileMDM9150, MDM9607, MDM9650, SDM660, SDM845, SM8150, SM8250, SXR2130
qualcommsm8250_firmware
qualcommmdm9607_firmware
qualcommsm8150_firmware
qualcommmdm9150_firmware

Timeline

References

Open in Interactive Console →