CVE-2019-14091: Double Free
Double free issue in NPU due to lack of resource locking mechanism to avoid race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9607, QCS405, Rennell, Saipan, SC8180X, SDX55, SM8150, SM8250, SXR2130
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-14091?
CVE-2019-14091 is classified as a high-severity vulnerability due to the potential for a double free condition leading to denial of service or memory corruption.
How do I fix CVE-2019-14091?
To remediate CVE-2019-14091, ensure that you update to the patched firmware versions provided by Qualcomm for affected devices.
Which devices are affected by CVE-2019-14091?
CVE-2019-14091 affects various Qualcomm hardware including MDM9607, QCS405, Rennell, Saipan, SC8180X, SDX55, SM8150, SM8250, and SXR2130.
What types of vulnerabilities are associated with CVE-2019-14091?
CVE-2019-14091 is associated with memory management vulnerabilities specifically related to a double free condition in the NPU.
Is there a risk of exploitation for CVE-2019-14091?
Yes, the exploitation of CVE-2019-14091 could lead to potential system instability or malicious access if not addressed.