7.8

CVE-2019-14008

Possible null pointer dereference issue in location assistance data processing due to missing null check on resources before using it in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9607, MDM9650, SDM660, SDM845, SM8150, SM8250, SXR2130
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Mdm9150 Firmware Version -
   Qualcomm ≫ Mdm9150 Version -
Qualcomm ≫ Mdm9607 Firmware Version -
   Qualcomm ≫ Mdm9607 Version -
Qualcomm ≫ Mdm9650 Firmware Version -
   Qualcomm ≫ Mdm9650 Version -
Qualcomm ≫ Sdm660 Firmware Version -
   Qualcomm ≫ Sdm660 Version -
Qualcomm ≫ Sdm845 Firmware Version -
   Qualcomm ≫ Sdm845 Version -
Qualcomm ≫ Sm8150 Firmware Version -
   Qualcomm ≫ Sm8150 Version -
Qualcomm ≫ Sm8250 Firmware Version -
   Qualcomm ≫ Sm8250 Version -
Qualcomm ≫ Sxr2130 Firmware Version -
   Qualcomm ≫ Sxr2130 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.81% 0.522
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://www.qualcomm.com/company/product-security/bulletins/january-2020-bulletin
Vendor Advisory