{"id":"CVE-2019-14091","aliases":["EUVD-2019-5345","GHSA-3v9c-8rh8-vmj3"],"status":"published","title":"Double free issue in NPU due to lack of resource locking mechanism to avoid race condition in...","description":"Double free issue in NPU due to lack of resource locking mechanism to avoid race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music in MDM9607, QCS405, Rennell, Saipan, SC8180X, SDX55, SM8150, SM8250, SXR2130","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00153,"percentile":0.04468,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-415","CWE-667"],"published":"2020-06-22T07:10:37Z","modified":"2026-06-17T02:17:48Z","products":[{"vendor":"qualcomm","product":"mdm9607_firmware"},{"vendor":"qualcomm","product":"qcs405_firmware"},{"vendor":"qualcomm","product":"rennell_firmware"},{"vendor":"qualcomm","product":"saipan_firmware"},{"vendor":"qualcomm","product":"sc8180x_firmware"},{"vendor":"qualcomm","product":"sdx55_firmware"},{"vendor":"qualcomm","product":"sm8150_firmware"},{"vendor":"qualcomm","product":"sm8250_firmware"},{"vendor":"qualcomm","product":"sxr2130_firmware"},{"vendor":"qualcomm, inc.","product":"snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice \u0026 music"}],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin","tags":["x_refsource_CONFIRM","x_transferred","Broken Link"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14091"},{"url":"https://www.qualcomm.com/company/product-security/bulletins/june-2020-security-bulletin","tags":["Vendor Advisory"]},{"url":"https://github.com/advisories/GHSA-3v9c-8rh8-vmj3"}],"sources":{"cve":[{"id":"CVE-2019-14091","description":"Double free issue in NPU due to lack of resource locking mechanism to avoid race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music in MDM9607, QCS405, Rennell, Saipan, SC8180X, SDX55, SM8150, SM8250, SXR2130","status":"published","published":"2020-06-22T07:10:37Z","modified":"2024-08-05T00:12:42.215Z","updated_at":"2026-11-02T14:20:17.722148Z"}],"euvd":[{"id":"EUVD-2019-5345","description":"Double free issue in NPU due to lack of resource locking mechanism to avoid race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music in MDM9607, QCS405, Rennell, Saipan, SC8180X, SDX55, SM8150, SM8250, SXR2130","status":"published","published":"2020-06-22T07:10:37Z","modified":"2024-08-05T00:12:42Z","updated_at":"2026-11-03T02:40:40.581814Z"}],"ghsa":[{"id":"GHSA-3v9c-8rh8-vmj3","title":"Double free issue in NPU due to lack of resource locking mechanism to avoid race condition in...","description":"Double free issue in NPU due to lack of resource locking mechanism to avoid race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music in MDM9607, QCS405, Rennell, Saipan, SC8180X, SDX55, SM8150, SM8250, SXR2130","status":"published","published":"2022-05-24T17:21:22Z","modified":"2023-01-29T05:03:24Z","cwes":["CWE-415"],"updated_at":"2026-11-02T14:45:19.009235Z"}],"nvd":[{"id":"CVE-2019-14091","description":"Double free issue in NPU due to lack of resource locking mechanism to avoid race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music in MDM9607, QCS405, Rennell, Saipan, SC8180X, SDX55, SM8150, SM8250, SXR2130","status":"published","published":"2020-06-22T07:15:11.63Z","modified":"2026-06-17T02:17:48.987Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-415","CWE-667"],"updated_at":"2026-11-02T14:05:47.558959Z"}]}}