CVE-2019-10502: Qualcomm MSM8909W Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Possible stack overflow when an index equal to io buffer size is accessed in camera module in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 845 / SD 850, SD 855, SDM439, SDX24

Affected products

Qualcomm MSM8909W Firmware: affected versions not specified
Qualcomm QCS405 Firmware: affected versions not specified
Qualcomm QCS605 Firmware: affected versions not specified
Qualcomm Qualcomm 215 Firmware: affected versions not specified
Qualcomm Sd 205 Firmware: affected versions not specified
Qualcomm Sd 210 Firmware: affected versions not specified
Qualcomm Sd 212 Firmware: affected versions not specified
Qualcomm Sd 425 Firmware: affected versions not specified
Qualcomm Sd 429 Firmware: affected versions not specified
Qualcomm Sd 439 Firmware: affected versions not specified
Qualcomm Sd 450 Firmware: affected versions not specified
Qualcomm Sd 625 Firmware: affected versions not specified
Qualcomm Sd 632 Firmware: affected versions not specified
Qualcomm Sd 665 Firmware: affected versions not specified
Qualcomm Sd 670 Firmware: affected versions not specified
Qualcomm Sd 675 Firmware: affected versions not specified
Qualcomm Sd 710 Firmware: affected versions not specified
Qualcomm Sd 712 Firmware: affected versions not specified
Qualcomm Sd 730 Firmware: affected versions not specified
Qualcomm Sd 845 Firmware: affected versions not specified
Qualcomm Sd 850 Firmware: affected versions not specified
Qualcomm Sd 855 Firmware: affected versions not specified
Qualcomm SDM439 Firmware: affected versions not specified
Qualcomm SDX24 Firmware: affected versions not specified

Published 2019-11-06. Last modified 2026-06-17.