What’s Vulnerable › Vulnerabilities

CVE-2019-10502

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-11-06 · updated 2026-06-17
• Weakness: CWE-119

Description

Possible stack overflow when an index equal to io buffer size is accessed in camera module in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 845 / SD 850, SD 855, SDM439, SDX24

Affected products

• Qualcomm Msm8909W Firmware: all versions
• Qualcomm Qcs405 Firmware: all versions
• Qualcomm Qcs605 Firmware: all versions
• Qualcomm 215 Firmware: all versions
• Qualcomm Sd 205 Firmware: all versions
• Qualcomm Sd 210 Firmware: all versions
• Qualcomm Sd 212 Firmware: all versions
• Qualcomm Sd 425 Firmware: all versions
• Qualcomm Sd 429 Firmware: all versions
• Qualcomm Sd 439 Firmware: all versions
• Qualcomm Sd 450 Firmware: all versions
• Qualcomm Sd 625 Firmware: all versions
• Qualcomm Sd 632 Firmware: all versions
• Qualcomm Sd 665 Firmware: all versions
• Qualcomm Sd 670 Firmware: all versions
• Qualcomm Sd 675 Firmware: all versions
• Qualcomm Sd 710 Firmware: all versions
• Qualcomm Sd 712 Firmware: all versions
• Qualcomm Sd 730 Firmware: all versions
• Qualcomm Sd 845 Firmware: all versions
• Qualcomm Sd 850 Firmware: all versions
• Qualcomm Sd 855 Firmware: all versions
• Qualcomm Sdm439 Firmware: all versions
• Qualcomm Sdx24 Firmware: all versions

References

• https://source.android.com/security/bulletin/
• https://www.qualcomm.com/company/product-security/bulletins/september-2019-bulletin
• https://source.android.com/security/bulletin/

Get alerted when CVE-2019-10502 or the next vulnerability affects your stack