CVE-2019-14088: Qualcomm APQ8009 Firmware

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Possible use after free issue while CRM is accessing the link pointer from device private data due to lack of resource protection in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, MDM9206, MDM9207C, MDM9607, QCS605, SDM429W, SDX24, SM8150, SXR1130

Affected products

• Qualcomm APQ8009 Firmware: affected versions not specified
• Qualcomm MDM9206 Firmware: affected versions not specified
• Qualcomm MDM9207C Firmware: affected versions not specified
• Qualcomm MDM9607 Firmware: affected versions not specified
• Qualcomm QCS605 Firmware: affected versions not specified
• Qualcomm SDM429W Firmware: affected versions not specified
• Qualcomm SDX24 Firmware: affected versions not specified
• Qualcomm SM8150 Firmware: affected versions not specified
• Qualcomm SXR1130 Firmware: affected versions not specified

Published 2020-02-07. Last modified 2026-06-17.