CVE-2019-10520: Qualcomm QCS405 Firmware

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

An unprivileged application can allocate GPU memory by calling memory allocation ioctl function and can exhaust all the memory which results in out of memory in Snapdragon Mobile, Snapdragon Voice & Music in QCS405, SD 210/SD 212/SD 205, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 845 / SD 850, SD 855

Affected products

• Qualcomm QCS405 Firmware: affected versions not specified
• Qualcomm Sd 205 Firmware: affected versions not specified
• Qualcomm Sd 210 Firmware: affected versions not specified
• Qualcomm Sd 212 Firmware: affected versions not specified
• Qualcomm Sd 665 Firmware: affected versions not specified
• Qualcomm Sd 670 Firmware: affected versions not specified
• Qualcomm Sd 675 Firmware: affected versions not specified
• Qualcomm Sd 710 Firmware: affected versions not specified
• Qualcomm Sd 712 Firmware: affected versions not specified
• Qualcomm Sd 730 Firmware: affected versions not specified
• Qualcomm Sd 845 Firmware: affected versions not specified
• Qualcomm Sd 850 Firmware: affected versions not specified
• Qualcomm Sd 855 Firmware: affected versions not specified

Published 2019-12-12. Last modified 2026-06-17.