CVE-2019-14075 PUBLISHED CVSS 5.5 MEDIUM

Null pointer dereference issue in radio interface layer due to lack of null check in sapmodule destructor in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9607, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8998, Nicobar, QCS605, Rennell, Saipan, SDM450, SDM630, SDM636, SDM660, SDM670, SDM710, SM6150, SM7150, SM8150, SM8250, SXR2130

EPSS 0.04% · 12.0th percentile

Risk Scores

CVSS v3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.04%
12.0th percentile

Affected Products

VendorProductVersions
qualcommsdm636_firmware
qualcommmsm8998_firmware
qualcommqcs605_firmware
qualcommmsm8917_firmware
qualcommmsm8937_firmware
qualcommmdm9607_firmware
qualcommrennell_firmware
qualcommsm7150_firmware
qualcommsm8250_firmware
qualcommmsm8953_firmware
qualcommsxr2130_firmware
Qualcomm, Inc.Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon MobileMDM9607, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8998, Nicobar, QCS605, Rennell, Saipan, SDM450, SDM630, SDM636, SDM660, SDM670, SDM710, SM6150, SM7150, SM8150, SM8250, SXR2130
qualcommsdm450_firmware
qualcommsm8150_firmware
qualcommmsm8940_firmware
qualcommsdm630_firmware
qualcommsm6150_firmware
qualcommsdm660_firmware
qualcommsdm710_firmware
qualcommsaipan_firmware

…and 3 more

Timeline

References

Open in Interactive Console →