CVE-2019-10567

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

There is a way to deceive the GPU kernel driver into thinking there is room in the GPU ringbuffer and overwriting existing commands could allow unintended GPU opcodes to be executed in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCS405, QCS605, QM215, Rennell, SA6155P, Saipan, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Feb 7, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-105697.8Stack buffer overflow due to instance id is misplaced inside definition of hardware accelerated effects in makefile in Snapdragon Auto, SnapCVE-2019-10577.5A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input. An attacker who successCVE-2019-105717.8Snapshot of IB can lead to invalid address access due to missing check for size in the related function in Snapdragon Auto, Snapdragon CompuCVE-2019-105729.8Improper check in video driver while processing data from video firmware can lead to integer overflow and then buffer overflow in SnapdragonCVE-2019-105747.1Lack of boundary checks for data offsets received from HLOS can lead to out-of-bound read in Snapdragon Auto, Snapdragon Compute, SnapdragonCVE-2019-105757.8Wlan binary which is not signed with OEMs RoT is working on secure device without authentication failure in Snapdragon Compute, Snapdragon CCVE-2019-105779.1Improper input validation while processing SIP URI received from the network will lead to buffer over-read and then to denial of service in CVE-2019-105787.5Null pointer dereference can occur while parsing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnectiviCVE-2019-105799.1Buffer over-read can occur while playing the video clip which is not standard in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnectivitCVE-2019-105807.8When kernel thread unregistered listener, Use after free issue happened as the listener client`s private data has been already freed in SnapCVE-2019-105819.8NULL is assigned to local instance of audio device pointer after free instead of global static pointer and can lead to use after free issue CVE-2019-105827.8Use after free issue due to using of invalidated iterator to delete an object in sensors HAL in Snapdragon Auto, Snapdragon Consumer IOT, Sn