CVE-2019-10492

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Boot image not getting verified by AVB in Snapdragon Auto, Snapdragon Mobile, Snapdragon Wearables in MDM9607, MSM8909W, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 820, SD 820A, SDM439

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-345

Affected software

No affected versions have been published.

Timeline

Published
Sep 30, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-104939.8Position determination accuracy may be degraded due to wrongly decoded information in Snapdragon Auto, Snapdragon Compute, Snapdragon ConsumCVE-2019-104948.1Race condition between the camera functions due to lack of resource lock which will lead to memory corruption and UAF issue in Snapdragon AuCVE-2019-104957.3Arbitrary buffer write issue while processing sequence header during HEVC or AVC encoding. in Snapdragon Auto, Snapdragon Compute, SnapdragoCVE-2019-104967.8Lack of checking a variable received from driver and populating in Firmware data structure leads to buffer overflow in Snapdragon Auto, SnapCVE-2019-104977.8Use after free issue occurs If another instance of open for voice_svc node has been called from application without closing the previous oneCVE-2019-104987.8Buffer overflow scenario if the client sends more than 5 io_vec requests to the server in Snapdragon Auto, Snapdragon Compute, Snapdragon CoCVE-2019-104997.8Improper validation of read and write index of tx and rx fifo`s before using for data copy from fifo can lead to out-of-bound access. in SnaCVE-2019-10504.7An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker wCVE-2019-105009.8While processing MT Secondary PDP request, Buffer overflow will happen due to incorrect calculation of buffer size in Snapdragon Auto, SnapdCVE-2019-105017.8Possible use after free issue due to improper input validation in volume listener library in Snapdragon Auto, Snapdragon Compute, SnapdragonCVE-2019-105027.8Possible stack overflow when an index equal to io buffer size is accessed in camera module in Snapdragon Compute, Snapdragon Consumer IOT, SCVE-2019-105037.8Out-of-bounds access can occur in camera driver due to improper validation of array index in Snapdragon Auto, Snapdragon Consumer Electronic