VULNERABILITY INTELLIGENCE
CVE-2019-10520
CVSS score5.5 MEDIUM
EPSS probability0.17%
CISA KEVNot currently listed
Published2019-12-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Description
An unprivileged application can allocate GPU memory by calling memory allocation ioctl function and can exhaust all the memory which results in out of memory in Snapdragon Mobile, Snapdragon Voice & Music in QCS405, SD 210/SD 212/SD 205, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 845 / SD 850, SD 855
Weakness classification
- nvd@nist.gov: CWE-772
Primary references
- product-security@qualcomm.com — Patch, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory