CVE-2019-14024

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions in MSM8917, MSM8953, Nicobar, QM215, Rennell, SDM429, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SM6150, SM7150, SM8150, SM8250, SXR2130

Description: A possible stack-use-after-scope issue exists in the NFC use case for card emulation. This issue may be present in various Qualcomm Snapdragon products, including Snapdragon Auto, Snapdragon Industrial IOT, and Snapdragon Mobile.

Recommendations: For Qualcomm Snapdragon versions in MSM8917, MSM8953, Nicobar, QM215, Rennell, SDM429, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SM6150, SM7150, SM8150, SM8250, SXR2130, consider disabling the NFC card emulation feature until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.