CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2019-14091
High (7.8) in qualcomm. EPSS 0.2% chance of exploitation in the next 30 days.
Double free issue in NPU due to lack of resource locking mechanism to avoid race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9607, QCS405, Rennell, Saipan, SC8180X, SDX55, SM8150, SM8250, SXR2130
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 4% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-415, CWE-667
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:mdm9607_firmware
- qualcomm:qcs405_firmware
- qualcomm:rennell_firmware
- qualcomm:saipan_firmware
- qualcomm:sc8180x_firmware
- qualcomm:sdx55_firmware
- qualcomm:sm8150_firmware
- qualcomm:sm8250_firmware
- qualcomm:sxr2130_firmware