CVE-2019-10495

HighCVSS 7.3/10Last modified Jun 17, 2026

Description

Arbitrary buffer write issue while processing sequence header during HEVC or AVC encoding. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Nov 6, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-104967.8Lack of checking a variable received from driver and populating in Firmware data structure leads to buffer overflow in Snapdragon Auto, SnapCVE-2019-104977.8Use after free issue occurs If another instance of open for voice_svc node has been called from application without closing the previous oneCVE-2019-104987.8Buffer overflow scenario if the client sends more than 5 io_vec requests to the server in Snapdragon Auto, Snapdragon Compute, Snapdragon CoCVE-2019-104997.8Improper validation of read and write index of tx and rx fifo`s before using for data copy from fifo can lead to out-of-bound access. in SnaCVE-2019-10504.7An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker wCVE-2019-105009.8While processing MT Secondary PDP request, Buffer overflow will happen due to incorrect calculation of buffer size in Snapdragon Auto, SnapdCVE-2019-105017.8Possible use after free issue due to improper input validation in volume listener library in Snapdragon Auto, Snapdragon Compute, SnapdragonCVE-2019-105027.8Possible stack overflow when an index equal to io buffer size is accessed in camera module in Snapdragon Compute, Snapdragon Consumer IOT, SCVE-2019-105037.8Out-of-bounds access can occur in camera driver due to improper validation of array index in Snapdragon Auto, Snapdragon Consumer ElectronicCVE-2019-105046.5Firmware not able to send EXT scan response to host within 1 sec due to resource consumption issue in Snapdragon Auto, Snapdragon Consumer ICVE-2019-105059.8Out of bound access while processing a non-standard IE measurement request with length crossing past the size of frame in Snapdragon Auto, SCVE-2019-105067.8While processing QCA_NL80211_VENDOR_SUBCMD_AVOID_FREQUENCY vendor command, driver does not validate the data obtained from the user space wh