CVE-2019-14034 in Snapdragon Auto

Riassunto

di VulDB • 29/06/2026

Use after free durante l'elaborazione della query eeprom poiché esiste il rischio di non sbloccare il mutex dopo la verifica di un errore in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables nei chip APQ8009, APQ8053, MSM8909W, MSM8917, MSM8953, Nicobar, QCS605, QM215, Rennell, SA6155P, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Prenotare: 19/07/2019
• Moderazione: accettato
• Voce: VDB-149170
• CPE: pronto
• CWE: CWE-416 (confermato)
• CVSS: 7.8 (NVD)
• EPSS: 0.00202
• KEV: no
• Attività: molto basso
• Settore: Hospital, Telecommunication, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-14034
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-14034
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-14034/