VULNERABILITY INTELLIGENCE
CVE-2019-14091
CVSS score7.8 HIGH
EPSS probability0.15%
CISA KEVNot currently listed
Published2020-06-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
Double free issue in NPU due to lack of resource locking mechanism to avoid race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9607, QCS405, Rennell, Saipan, SC8180X, SDX55, SM8150, SM8250, SXR2130
Weakness classification
- nvd@nist.gov: CWE-415
Primary references
- product-security@qualcomm.com — Broken Link
- nvd@nist.gov — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link