What is CVE-2019-14024?

CVE-2019-14024 is a high-severity vulnerability in Qualcomm Msm8917, classified under Use After Free. CVSS score: 7.8/10. Published 2020-01-21.

How severe is CVE-2019-14024?

High severity. CVSS v3 base score is 7.8 out of 10.

Use After Free in Qualcomm Msm8917

CVE-2019-14024

Possible stack-use-after-scope issue in NFC usecase for card emulation in Snapdragon Auto, Snapdragon Industrial IOT, Snapdragon Mobile in MSM8917, MSM8953, Nicobar, QM215, Rennell, SDM429, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SM6150, SM7150, SM8150, SM8250, SXR2130

Vulnerability class: Use-After-Free

EPSS: 0.002 (10.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Qualcomm Msm8917
Qualcomm Msm8917_firmware
Qualcomm Msm8953
Qualcomm Msm8953_firmware
Qualcomm Nicobar
Qualcomm Nicobar_firmware
Qualcomm Qm215
Qualcomm Qm215_firmware
Qualcomm Rennell
Qualcomm Rennell_firmware

Weakness classification (CWE)

CWE-416 — Use After Free

References

product-security@qualcomm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2019-14024?: CVE-2019-14024 is a high-severity vulnerability in Qualcomm Msm8917, classified under Use After Free. CVSS score: 7.8/10. Published 2020-01-21.
How severe is CVE-2019-14024?: High severity. CVSS v3 base score is 7.8 out of 10.