CVE-2019-2250: Qualcomm QCS605 Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Kernel can write to arbitrary memory address passed by user while freeing/stopping a thread in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCS605, SD 675, SD 712 / SD 710 / SD 670, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SM7150, SXR1130

Affected products

• Qualcomm QCS605 Firmware: affected versions not specified
• Qualcomm Sd 670 Firmware: affected versions not specified
• Qualcomm Sd 675 Firmware: affected versions not specified
• Qualcomm Sd 710 Firmware: affected versions not specified
• Qualcomm Sd 712 Firmware: affected versions not specified
• Qualcomm Sd 835 Firmware: affected versions not specified
• Qualcomm Sd 845 Firmware: affected versions not specified
• Qualcomm Sd 850 Firmware: affected versions not specified
• Qualcomm Sd 855 Firmware: affected versions not specified
• Qualcomm Sd 8cx Firmware: affected versions not specified
• Qualcomm SM7150 Firmware: affected versions not specified
• Qualcomm SXR1130 Firmware: affected versions not specified

Published 2019-05-24. Last modified 2026-06-17.