CVE-2019-2281
Last modified
CVE-2019-2281 is a vulnerability of currently unknown severity. An unauthenticated bitmap image can be loaded in to memory and subsequently cause execution of unverified code. in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in QCS405, QCS605, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SDX24, SXR1130. EPSS estimates a 0.23% chance of exploitation in the next 30 days.
Description
An unauthenticated bitmap image can be loaded in to memory and subsequently cause execution of unverified code. in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in QCS405, QCS605, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SDX24, SXR1130
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Qualcomm | Qcs405 Firmware | All versions |
| Qualcomm | Qcs605 Firmware | All versions |
| Qualcomm | Sd 636 Firmware | All versions |
| Qualcomm | Sd 665 Firmware | All versions |
| Qualcomm | Sd 675 Firmware | All versions |
| Qualcomm | Sd 712 Firmware | All versions |
| Qualcomm | Sd 710 Firmware | All versions |
| Qualcomm | Sd 670 Firmware | All versions |
| Qualcomm | Sd 730 Firmware | All versions |
| Qualcomm | Sd 820 Firmware | All versions |
| Qualcomm | Sd 835 Firmware | All versions |
| Qualcomm | Sd 845 Firmware | All versions |
| Qualcomm | Sd 850 Firmware | All versions |
| Qualcomm | Sd 855 Firmware | All versions |
| Qualcomm | Sd 8cx Firmware | All versions |
| Qualcomm | Sda660 Firmware | All versions |
| Qualcomm | Sdm630 Firmware | All versions |
| Qualcomm | Sdm660 Firmware | All versions |
| Qualcomm | Sdx24 Firmware | All versions |
| Qualcomm | Sxr1130 Firmware | All versions |
References
- https://www.qualcomm.com/company/product-security/bulletinsVendor Advisory
- https://www.qualcomm.com/company/product-security/bulletinsVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-2281?
How severe is CVE-2019-2281?
How do I fix CVE-2019-2281?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-2275While deserializing any key blob during key operations, buff…5.5
- CVE-2019-2276Possible out of bound read occurs while processing beaconing…
- CVE-2019-2277Out of bound read can happen due to lack of NULL termination…
- CVE-2019-2278User keystore signature is ignored in boot and can lead to b…
- CVE-2019-2279Shared memory gets updated with invalid data and may lead to…
- CVE-2019-2280Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2019-2282Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2019-2283Improper validation of read and write index of tx and rx fif…9.8
- CVE-2019-2284Possible use-after-free issue due to a race condition while …7
- CVE-2019-2285Out of bound write issue is observed while giving informatio…9.8
- CVE-2019-2286Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2019-2287Improper validation for inputs received from firmware can le…
Are you affected by CVE-2019-2281?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST