Lucene search

[email protected]CVE-2019-10520

HistoryDec 12, 2019 - 9:15 a.m.

CVE-2019-10520

2019-12-1209:15:00

CWE-772

[email protected]

web.nvd.nist.gov

cve-2019-10520

gpu memory exhaustion

snapdragon mobile

memory allocation

security vulnerability

nvd

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

8.3 High

AI Score

Confidence

High

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

0.0004 Low

EPSS

Percentile

12.0%

JSON

An unprivileged application can allocate GPU memory by calling memory allocation ioctl function and can exhaust all the memory which results in out of memory in Snapdragon Mobile, Snapdragon Voice & Music in QCS405, SD 210/SD 212/SD 205, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 845 / SD 850, SD 855

CPENameOperatorVersion
qualcomm:qcs405_firmwarequalcomm qcs405 firmwareeq-
qualcomm:sd_210_firmwarequalcomm sd 210 firmwareeq-
qualcomm:sd_212_firmwarequalcomm sd 212 firmwareeq-
qualcomm:sd_205_firmwarequalcomm sd 205 firmwareeq-
qualcomm:sd_665_firmwarequalcomm sd 665 firmwareeq-
qualcomm:sd_675_firmwarequalcomm sd 675 firmwareeq-
qualcomm:sd_712_firmwarequalcomm sd 712 firmwareeq-
qualcomm:sd_710_firmwarequalcomm sd 710 firmwareeq-
qualcomm:sd_670_firmwarequalcomm sd 670 firmwareeq-
qualcomm:sd_730_firmwarequalcomm sd 730 firmwareeq-

CPE	Name	Operator	Version
qualcomm:qcs405_firmware	qualcomm qcs405 firmware	eq	-
qualcomm:sd_210_firmware	qualcomm sd 210 firmware	eq	-
qualcomm:sd_212_firmware	qualcomm sd 212 firmware	eq	-
qualcomm:sd_205_firmware	qualcomm sd 205 firmware	eq	-
qualcomm:sd_665_firmware	qualcomm sd 665 firmware	eq	-
qualcomm:sd_675_firmware	qualcomm sd 675 firmware	eq	-
qualcomm:sd_712_firmware	qualcomm sd 712 firmware	eq	-
qualcomm:sd_710_firmware	qualcomm sd 710 firmware	eq	-
qualcomm:sd_670_firmware	qualcomm sd 670 firmware	eq	-
qualcomm:sd_730_firmware	qualcomm sd 730 firmware	eq	-

Rows per page:

1-10 of 131

References

source.android.com/security/bulletin/pixel/2019-11-01

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

8.3 High

AI Score

Confidence

High

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

0.0004 Low

EPSS

Percentile

12.0%

JSON

Related for CVE-2019-10520

prion1 androidsecurity1