Double Free in Qualcomm products - CVE-2019-14065
Published: May 17, 2025
Vulnerability identifier: #VU109327
CSH Severity:
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:/VI:/VA:/SC:N/SI:N/SA:N]
CVE-ID: CVE-2019-14065
CWE-ID: CWE-415
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows #AV# #AU# to #BASIC_IMPACT#.
The vulnerability exists due to improper input validation in TrustZone. #AV# #AU# can #EXT_IMPACT#.
Affected software
SDM845
SC8180X
SDA660
SDA845
SDM630
SDM636
SDM660
SDM670
SDM710
SA6155P
SDX55
SM6150
SM7150
SM8150
SM8250
SXR1130
SXR2130
APQ8098
Kamorta
MDM9150
MDM9206
MDM9607
MDM9650
MSM8905
APQ8009
MSM8998
Nicobar
QCS405
QCS605
Rennell
SC7180
SDM850
MSM8909
MDM9205
QCS404
QCS610
SA515M
SC8180X
SDA660
SDA845
SDM630
SDM636
SDM660
SDM670
SDM710
SA6155P
SDX55
SM6150
SM7150
SM8150
SM8250
SXR1130
SXR2130
APQ8098
Kamorta
MDM9150
MDM9206
MDM9607
MDM9650
MSM8905
APQ8009
MSM8998
Nicobar
QCS405
QCS605
Rennell
SC7180
SDM850
MSM8909
MDM9205
QCS404
QCS610
SA515M
How to mitigate CVE-2019-14065
Install security update from vendor's website.