What is CVE-2019-14037?

CVE-2019-14037 is a vulnerability that can lead to a Use-After-Free condition when close and bind operations are done on a socket.

Which software products are affected by CVE-2019-14037?

CVE-2019-14037 affects Google Android, Qualcomm Apq8009 Firmware, Qualcomm Apq8098, Qualcomm Mdm9206 Firmware, Qualcomm Mdm9207c, Qualcomm Mdm9607, Qualcomm Mdm9640 Firmware, Qualcomm Mdm9650 Firmware, Qualcomm Msm8905 Firmware, Qualcomm Msm8909w, Qualcomm Msm8996 Firmware, Qualcomm Msm8996au, Qualcomm Qcn7605, Qualcomm Qcn7606 Firmware, Qualcomm Qcs605 Firmware, Qualcomm Sc8180x Firmware, Qualcomm Sda660, Qualcomm Sda845 Firmware, Qualcomm Sdm439 Firmware, Qualcomm Sdm630 Firmware, Qualcomm Sdm636, Qualcomm Sdm660 Firmware, Qualcomm Sdm670 Firmware, Qualcomm Sdm710 Firmware, Qualcomm Sdm845 Firmware, Qualcomm Sdx20, Qualcomm Sdx24 Firmware, Qualcomm Sdx55 Firmware, Qualcomm Sm8150 Firmware, Qualcomm Sxr1130 Firmware.

What is the severity of CVE-2019-14037?

CVE-2019-14037 has a severity score of 7.8 (high).

How can I fix CVE-2019-14037?

To fix CVE-2019-14037, apply the updates and patches provided by your software vendor.

Where can I find more information about CVE-2019-14037?

You can find more information about CVE-2019-14037 in the security bulletins published by Qualcomm: [Link](https://www.qualcomm.com/company/product-security/bulletins/july-2020-bulletin) and [Link](https://www.qualcomm.com/company/product-security/bulletins/july-2020-security-bulletin).

Vulnerability/
CVE-2019-14037

high

7.8

CWE

416

30/7/2020

31/7/2020

CVE-2019-14037: Use After Free

First published: Thu Jul 30 2020(Updated: )

Close and bind operations done on a socket can lead to a Use-After-Free condition. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8996, MSM8996AU, QCN7605, QCN7606, QCS605, SC8180X, SDA660, SDA845, SDM439, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SDX55, SM8150, SXR1130

Credit: product-security@qualcomm.com

Affected Software	Affected Version	How to fix
Google Android
Qualcomm Apq8009
Google Android
Google Android
Google Android
Google Android
Google Android
Qualcomm Apq8098
Qualcomm Mdm9206 Firmware
Qualcomm Mdm9206
Google Android
Google Android
Google Android
Qualcomm Mdm9607
Qualcomm Mdm9640 Firmware
Qualcomm Mdm9640
Qualcomm Mdm9650 Firmware
Qualcomm Mdm9650
Qualcomm Msm8905 Firmware
Qualcomm Msm8905
Google Android
Google Android
Qualcomm Msm8996 Firmware
Google Android
Google Android
Qualcomm Msm8996au
Google Android
Google Android
Qualcomm Qcn7606 Firmware
Qualcomm Qcn7606
Qualcomm Qcs605 Firmware
Google Android
Qualcomm Sc8180x Firmware
Qualcomm Sc8180x
Google Android
Google Android
Qualcomm Sda845 Firmware
Qualcomm Sda845
Qualcomm Sdm439 Firmware
Qualcomm Sdm439
Qualcomm Sdm630 Firmware
Qualcomm Sdm630
Google Android
Qualcomm Sdm636
Qualcomm Sdm660 Firmware
Qualcomm Sdm660
Qualcomm Sdm670 Firmware
Qualcomm Sdm670
Qualcomm Sdm710 Firmware
Qualcomm Sdm710
Qualcomm Sdm845 Firmware
Qualcomm Sdm845
Google Android
Qualcomm Sdx20
Qualcomm Sdx24 Firmware
Google Android
Qualcomm Sdx55 Firmware
Qualcomm Sdx55
Qualcomm Sm8150 Firmware
Qualcomm Sm8150
Qualcomm Sxr1130 Firmware
Qualcomm Sxr1130

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is CVE-2019-14037?
CVE-2019-14037 is a vulnerability that can lead to a Use-After-Free condition when close and bind operations are done on a socket.
Which software products are affected by CVE-2019-14037?
CVE-2019-14037 affects Google Android, Qualcomm Apq8009 Firmware, Qualcomm Apq8098, Qualcomm Mdm9206 Firmware, Qualcomm Mdm9207c, Qualcomm Mdm9607, Qualcomm Mdm9640 Firmware, Qualcomm Mdm9650 Firmware, Qualcomm Msm8905 Firmware, Qualcomm Msm8909w, Qualcomm Msm8996 Firmware, Qualcomm Msm8996au, Qualcomm Qcn7605, Qualcomm Qcn7606 Firmware, Qualcomm Qcs605 Firmware, Qualcomm Sc8180x Firmware, Qualcomm Sda660, Qualcomm Sda845 Firmware, Qualcomm Sdm439 Firmware, Qualcomm Sdm630 Firmware, Qualcomm Sdm636, Qualcomm Sdm660 Firmware, Qualcomm Sdm670 Firmware, Qualcomm Sdm710 Firmware, Qualcomm Sdm845 Firmware, Qualcomm Sdx20, Qualcomm Sdx24 Firmware, Qualcomm Sdx55 Firmware, Qualcomm Sm8150 Firmware, Qualcomm Sxr1130 Firmware.
What is the severity of CVE-2019-14037?
CVE-2019-14037 has a severity score of 7.8 (high).
How can I fix CVE-2019-14037?
To fix CVE-2019-14037, apply the updates and patches provided by your software vendor.
Where can I find more information about CVE-2019-14037?
You can find more information about CVE-2019-14037 in the security bulletins published by Qualcomm: [Link](https://www.qualcomm.com/company/product-security/bulletins/july-2020-bulletin) and [Link](https://www.qualcomm.com/company/product-security/bulletins/july-2020-security-bulletin).