Improper Validation of Array Index in Qualcomm products - CVE-2019-10629
Published: May 17, 2025
Vulnerability identifier: #VU109309
CSH Severity:
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:/VI:/VA:/SC:N/SI:N/SA:N]
CVE-ID: CVE-2019-10629
CWE-ID: CWE-129
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows #AV# #AU# to #BASIC_IMPACT#.
The vulnerability exists due to improper input validation in kernel. #AV# #AU# can #EXT_IMPACT#.
Affected software
SC7180
SDM850
Bitra
SA415M
QCS610
QCS404
QCA8081
MDM9205
IPQ6018
SXR2130
SXR1130
SM8250
SM8150
SM7150
SM6150
SDX55
SDX24
SDX20
SDM845
SDM710
SDM670
SDA845
SC8180X
Saipan
SA6155P
Rennell
QCS605
QCS405
QCN7605
Nicobar
IPQ8074
SDM850
Bitra
SA415M
QCS610
QCS404
QCA8081
MDM9205
IPQ6018
SXR2130
SXR1130
SM8250
SM8150
SM7150
SM6150
SDX55
SDX24
SDX20
SDM845
SDM710
SDM670
SDA845
SC8180X
Saipan
SA6155P
Rennell
QCS605
QCS405
QCN7605
Nicobar
IPQ8074
How to mitigate CVE-2019-10629
Install security update from vendor's website.