What is CVE-2019-14087?

CVE-2019-14087 is a high-severity vulnerability in Qualcomm Msm8909w, classified under Use After Free. CVSS score: 7.8/10. Published 2020-06-02.

How severe is CVE-2019-14087?

High severity. CVSS v3 base score is 7.8 out of 10.

Use After Free in Qualcomm Msm8909w

CVE-2019-14087

Failure in buffer management while accessing handle for HDR blit when color modes not supported by display in Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wearables in MSM8909W, QCS605

Vulnerability class: Use-After-Free

EPSS: 0.002 (10.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Qualcomm Msm8909w
Qualcomm Msm8909w_firmware
Qualcomm Qcs605
Qualcomm Qcs605_firmware
Qualcomm, Inc. Snapdragon Consumer Iot, Mobile, Wearables — versions MSM8909W, QCS605

Weakness classification (CWE)

CWE-416 — Use After Free

References

product-security@qualcomm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2019-14087?: CVE-2019-14087 is a high-severity vulnerability in Qualcomm Msm8909w, classified under Use After Free. CVSS score: 7.8/10. Published 2020-06-02.
How severe is CVE-2019-14087?: High severity. CVSS v3 base score is 7.8 out of 10.