Improper Validation of Array Index in Qualcomm products - CVE-2019-10527
Published: May 17, 2025
Vulnerability identifier: #VU109318
CSH Severity:
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:/VI:/VA:/SC:N/SI:N/SA:N]
CVE-ID: CVE-2019-10527
CWE-ID: CWE-129
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows #AV# #AU# to #BASIC_IMPACT#.
The vulnerability exists due to improper input validation in Mproc. #AV# #AU# can #EXT_IMPACT#.
Affected software
Saipan
SDM450
SDM439
SDM429W
SDM429
SDA845
SDA660
SC8180X
SDM630
SA6155P
Rennell
QM215
QCS605
QCS405
SDX20
SXR2130
SXR1130
SM8250
SM8150
SM7150
SM6150
SDX55
SDX24
SDM845
SDM710
SDM670
SDM660
SDM636
SDM632
Kamorta
MSM8905
MDM9650
MDM9640
MDM9607
MDM9207C
MDM9206
MDM9150
IPQ8074
APQ8098
APQ8096AU
APQ8053
APQ8017
MSM8996AU
QCN7605
QCM2150
QCA6574AU
Nicobar
MSM8998
APQ8009
MSM8996
MSM8953
MSM8940
MSM8937
MSM8920
MSM8917
MSM8909W
SC7180
SA515M
SA415M
QCS610
QCS404
SDM850
MDM9205
MSM8909
IPQ6018
Bitra
QCN7606
QCA8081
QCA4531
SDM450
SDM439
SDM429W
SDM429
SDA845
SDA660
SC8180X
SDM630
SA6155P
Rennell
QM215
QCS605
QCS405
SDX20
SXR2130
SXR1130
SM8250
SM8150
SM7150
SM6150
SDX55
SDX24
SDM845
SDM710
SDM670
SDM660
SDM636
SDM632
Kamorta
MSM8905
MDM9650
MDM9640
MDM9607
MDM9207C
MDM9206
MDM9150
IPQ8074
APQ8098
APQ8096AU
APQ8053
APQ8017
MSM8996AU
QCN7605
QCM2150
QCA6574AU
Nicobar
MSM8998
APQ8009
MSM8996
MSM8953
MSM8940
MSM8937
MSM8920
MSM8917
MSM8909W
SC7180
SA515M
SA415M
QCS610
QCS404
SDM850
MDM9205
MSM8909
IPQ6018
Bitra
QCN7606
QCA8081
QCA4531
How to mitigate CVE-2019-10527
Install security update from vendor's website.