CVE-2019-14075: Qualcomm MDM9607 Firmware

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Null pointer dereference issue in radio interface layer due to lack of null check in sapmodule destructor in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9607, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8998, Nicobar, QCS605, Rennell, Saipan, SDM450, SDM630, SDM636, SDM660, SDM670, SDM710, SM6150, SM7150, SM8150, SM8250, SXR2130

Affected products

• Qualcomm MDM9607 Firmware: affected versions not specified
• Qualcomm MSM8917 Firmware: affected versions not specified
• Qualcomm MSM8920 Firmware: affected versions not specified
• Qualcomm MSM8937 Firmware: affected versions not specified
• Qualcomm MSM8940 Firmware: affected versions not specified
• Qualcomm MSM8953 Firmware: affected versions not specified
• Qualcomm MSM8998 Firmware: affected versions not specified
• Qualcomm Nicobar Firmware: affected versions not specified
• Qualcomm QCS605 Firmware: affected versions not specified
• Qualcomm Rennell Firmware: affected versions not specified
• Qualcomm Saipan Firmware: affected versions not specified
• Qualcomm SDM450 Firmware: affected versions not specified
• Qualcomm SDM630 Firmware: affected versions not specified
• Qualcomm SDM636 Firmware: affected versions not specified
• Qualcomm SDM660 Firmware: affected versions not specified
• Qualcomm SDM670 Firmware: affected versions not specified
• Qualcomm SDM710 Firmware: affected versions not specified
• Qualcomm SM6150 Firmware: affected versions not specified
• Qualcomm SM7150 Firmware: affected versions not specified
• Qualcomm SM8150 Firmware: affected versions not specified
• Qualcomm SM8250 Firmware: affected versions not specified
• Qualcomm SXR2130 Firmware: affected versions not specified

Published 2020-04-16. Last modified 2026-06-17.