7.8

CVE-2019-14079

Access to the uninitialized variable when the driver tries to unmap the dma buffer of a request which was never mapped in the first place leading to kernel failure in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8009, APQ8053, MDM9607, MDM9640, MSM8909W, MSM8953, QCA6574AU, QCS605, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SDX24, SM8150, SXR1130
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Apq8009 Firmware Version -
   Qualcomm ≫ Apq8009 Version -
Qualcomm ≫ Apq8053 Firmware Version -
   Qualcomm ≫ Apq8053 Version -
Qualcomm ≫ Mdm9607 Firmware Version -
   Qualcomm ≫ Mdm9607 Version -
Qualcomm ≫ Mdm9640 Firmware Version -
   Qualcomm ≫ Mdm9640 Version -
Qualcomm ≫ Msm8909w Firmware Version -
   Qualcomm ≫ Msm8909w Version -
Qualcomm ≫ Msm8953 Firmware Version -
   Qualcomm ≫ Msm8953 Version -
Qualcomm ≫ Qca6574au Firmware Version -
   Qualcomm ≫ Qca6574au Version -
Qualcomm ≫ Qcs605 Firmware Version -
   Qualcomm ≫ Qcs605 Version -
Qualcomm ≫ Sda845 Firmware Version -
   Qualcomm ≫ Sda845 Version -
Qualcomm ≫ Sdm429 Firmware Version -
   Qualcomm ≫ Sdm429 Version -
Qualcomm ≫ Sdm429w Firmware Version -
   Qualcomm ≫ Sdm429w Version -
Qualcomm ≫ Sdm439 Firmware Version -
   Qualcomm ≫ Sdm439 Version -
Qualcomm ≫ Sdm450 Firmware Version -
   Qualcomm ≫ Sdm450 Version -
Qualcomm ≫ Sdm632 Firmware Version -
   Qualcomm ≫ Sdm632 Version -
Qualcomm ≫ Sdm670 Firmware Version -
   Qualcomm ≫ Sdm670 Version -
Qualcomm ≫ Sdm710 Firmware Version -
   Qualcomm ≫ Sdm710 Version -
Qualcomm ≫ Sdm845 Firmware Version -
   Qualcomm ≫ Sdm845 Version -
Qualcomm ≫ Sdx24 Firmware Version -
   Qualcomm ≫ Sdx24 Version -
Qualcomm ≫ Sm8150 Firmware Version -
   Qualcomm ≫ Sm8150 Version -
Qualcomm ≫ Sxr1130 Firmware Version -
   Qualcomm ≫ Sxr1130 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.45% 0.356
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-908 Use of Uninitialized Resource

The product uses or accesses a resource that has not been initialized.

https://www.qualcomm.com/company/product-security/bulletins/march-2020-bulletin
Vendor Advisory