CVE-2019-14075
Null pointer dereference issue in radio interface layer due to lack of null check in sapmodule destructor in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9607, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953,…
Does this matter?
Lower severity and a low EPSS score (0.18%). Track it; it rarely justifies an emergency change on its own.
Description
Null pointer dereference issue in radio interface layer due to lack of null check in sapmodule destructor in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9607, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8998, Nicobar, QCS605, Rennell, Saipan, SDM450, SDM630, SDM636, SDM660, SDM670, SDM710, SM6150, SM7150, SM8150, SM8250, SXR2130
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.18% probability · 8th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-476
- Affected
- qualcomm/mdm9607 firmware · qualcomm/msm8917 firmware · qualcomm/msm8920 firmware · qualcomm/msm8937 firmware · qualcomm/msm8940 firmware · qualcomm/msm8953 firmware · qualcomm/msm8998 firmware · qualcomm/nicobar firmware · qualcomm/qcs605 firmware · qualcomm/rennell firmware · qualcomm/saipan firmware · qualcomm/sdm450 firmware · qualcomm/sdm630 firmware · qualcomm/sdm636 firmware · qualcomm/sdm660 firmware · qualcomm/sdm670 firmware · qualcomm/sdm710 firmware · qualcomm/sm6150 firmware · qualcomm/sm7150 firmware · qualcomm/sm8150 firmware · +2 more
- Source
- product-security@qualcomm.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.