CVEvulnerability
CVE-2019-10520
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-12-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 4.9 MEDIUM — AV:L/AC:L/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-772
Description
An unprivileged application can allocate GPU memory by calling memory allocation ioctl function and can exhaust all the memory which results in out of memory in Snapdragon Mobile, Snapdragon Voice & Music in QCS405, SD 210/SD 212/SD 205, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 845 / SD 850, SD 855
Affected configurations
• qualcomm qcs405 firmware
• qualcomm sd 210 firmware
• qualcomm sd 212 firmware
• qualcomm sd 205 firmware
• qualcomm sd 665 firmware
• qualcomm sd 675 firmware
• qualcomm sd 712 firmware
• qualcomm sd 710 firmware
• qualcomm sd 670 firmware
• qualcomm sd 730 firmware
• qualcomm sd 845 firmware
• qualcomm sd 850 firmware
• qualcomm sd 855 firmware
Related
Weakness · CWE (1)
- CWE-772 Missing Release of Resource after Effective Lifetime weakness
References
- https://source.android.com/security/bulletin/pixel/2019-11-01 Patch, Third Party Advisory
- https://source.android.com/security/bulletin/pixel/2019-11-01 Patch, Third Party Advisory