What’s Vulnerable › Vulnerabilities

CVE-2019-10492

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-09-30 · updated 2026-06-17
• Weakness: CWE-345

Description

Boot image not getting verified by AVB in Snapdragon Auto, Snapdragon Mobile, Snapdragon Wearables in MDM9607, MSM8909W, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 820, SD 820A, SDM439

Affected products

• Qualcomm Mdm9607 Firmware: all versions
• Qualcomm Msm8909W Firmware: all versions
• Qualcomm 215 Firmware: all versions
• Qualcomm Sd 205 Firmware: all versions
• Qualcomm Sd 210 Firmware: all versions
• Qualcomm Sd 212 Firmware: all versions
• Qualcomm Sd 425 Firmware: all versions
• Qualcomm Sd 427 Firmware: all versions
• Qualcomm Sd 429 Firmware: all versions
• Qualcomm Sd 430 Firmware: all versions
• Qualcomm Sd 435 Firmware: all versions
• Qualcomm Sd 439 Firmware: all versions
• Qualcomm Sd 450 Firmware: all versions
• Qualcomm Sd 625 Firmware: all versions
• Qualcomm Sd 632 Firmware: all versions
• Qualcomm Sd 820 Firmware: all versions
• Qualcomm Sd 820A Firmware: all versions
• Qualcomm Sdm439 Firmware: all versions

References

• https://www.codeaurora.org/security-bulletin/2019/08/05/august-2019-code-aurora-security-bulletin
• https://www.codeaurora.org/security-bulletin/2019/08/05/august-2019-code-aurora-security-bulletin

Get alerted when CVE-2019-10492 or the next vulnerability affects your stack