First published: Mon Mar 02 2020(Updated: )
Access to the uninitialized variable when the driver tries to unmap the dma buffer of a request which was never mapped in the first place leading to kernel failure in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8009, APQ8053, MDM9607, MDM9640, MSM8909W, MSM8953, QCA6574AU, QCS605, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SDX24, SM8150, SXR1130
Credit: product-security@qualcomm.com
Affected Software | Affected Version | How to fix |
---|---|---|
Google Android | ||
Qualcomm apq8009 firmware | ||
Qualcomm apq8009 | ||
Qualcomm APQ8053 Firmware | ||
Qualcomm APQ8053 Firmware | ||
Qualcomm MDM9607 firmware | ||
Qualcomm MDM9607 | ||
qualcomm mdm9640 firmware | ||
qualcomm MDM9640 | ||
Qualcomm MSM8909W | ||
Qualcomm MSM8909W | ||
Qualcomm msm8953 firmware | ||
Qualcomm msm8953 | ||
qualcomm qca6574au firmware | ||
qualcomm qca6574au | ||
Qualcomm QCS605 firmware | ||
Qualcomm QCS605 | ||
qualcomm sda845 firmware | ||
qualcomm sda845 | ||
qualcomm SDM429 firmware | ||
qualcomm SDM429 | ||
qualcomm SDM429W firmware | ||
qualcomm SDM429W | ||
qualcomm SDM439 firmware | ||
qualcomm SDM439 | ||
qualcomm SDM450 firmware | ||
Qualcomm SDM450 | ||
qualcomm SDM632 firmware | ||
qualcomm SDM632 | ||
qualcomm sdm670 firmware | ||
qualcomm sdm670 | ||
qualcomm sdm710 firmware | ||
qualcomm sdm710 | ||
qualcomm SDM845 firmware | ||
qualcomm SDM845 | ||
Qualcomm sdx24 firmware | ||
Qualcomm sdx24 | ||
qualcomm SM8150 firmware | ||
qualcomm SM8150 | ||
Qualcomm SXR1130 Firmware | ||
Qualcomm SXR1130 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-14079 is classified as a high severity vulnerability due to potential kernel failures.
To fix CVE-2019-14079, users should update their Qualcomm firmware to the latest patched version provided by the vendor.
CVE-2019-14079 affects various Qualcomm Snapdragon devices, including models from Snapdragon Mobile, Automotive, and Consumer IOT categories.
The impact of CVE-2019-14079 can result in kernel crashes due to uninitialized variable access during DMA buffer unmapping.
Yes, CVE-2019-14079 primarily affects devices running Android and Qualcomm firmware.