CVE-2019-10572

—

CVSS 3.1

9.8 critical

EPSS

<1%p51

Published

Dec 18, 2019 (Dec 18, 2019)

Modified

Jun 17, 2026

Description

Improper check in video driver while processing data from video firmware can lead to integer overflow and then buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCS405, QCS605, QM215, SA6155P, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Vendors: qualcomm
Products: apq8009 firmware, apq8017 firmware, apq8053 firmware, apq8096au firmware, apq8098 firmware, mdm9206 firmware, mdm9207c firmware, mdm9607 firmware, mdm9640 firmware, mdm9650 firmware, msm8905 firmware, msm8909w firmware
Weakness: CWE-190
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.