5.5

CVE-2019-10520

An unprivileged application can allocate GPU memory by calling memory allocation ioctl function and can exhaust all the memory which results in out of memory in Snapdragon Mobile, Snapdragon Voice & Music in QCS405, SD 210/SD 212/SD 205, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 845 / SD 850, SD 855

Data is provided by the National Vulnerability Database (NVD)
Qualcomm ≫ Qcs405 Firmware Version-
   Qualcomm ≫ Qcs405 Version-
Qualcomm ≫ Sd 210 Firmware Version-
   Qualcomm ≫ Sd 210 Version-
Qualcomm ≫ Sd 212 Firmware Version-
   Qualcomm ≫ Sd 212 Version-
Qualcomm ≫ Sd 205 Firmware Version-
   Qualcomm ≫ Sd 205 Version-
Qualcomm ≫ Sd 665 Firmware Version-
   Qualcomm ≫ Sd 665 Version-
Qualcomm ≫ Sd 675 Firmware Version-
   Qualcomm ≫ Sd 675 Version-
Qualcomm ≫ Sd 712 Firmware Version-
   Qualcomm ≫ Sd 712 Version-
Qualcomm ≫ Sd 710 Firmware Version-
   Qualcomm ≫ Sd 710 Version-
Qualcomm ≫ Sd 670 Firmware Version-
   Qualcomm ≫ Sd 670 Version-
Qualcomm ≫ Sd 730 Firmware Version-
   Qualcomm ≫ Sd 730 Version-
Qualcomm ≫ Sd 845 Firmware Version-
   Qualcomm ≫ Sd 845 Version-
Qualcomm ≫ Sd 850 Firmware Version-
   Qualcomm ≫ Sd 850 Version-
Qualcomm ≫ Sd 855 Firmware Version-
   Qualcomm ≫ Sd 855 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.04% 0.096
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 4.9 3.9 6.9
AV:L/AC:L/Au:N/C:N/I:N/A:C
CWE-772 Missing Release of Resource after Effective Lifetime

The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.