{"id":"CVE-2019-2281","aliases":["EUVD-2019-11923","GHSA-rp2g-3r74-42mj"],"status":"published","title":"An unauthenticated bitmap image can be loaded in to memory and subsequently cause execution of...","description":"An unauthenticated bitmap image can be loaded in to memory and subsequently cause execution of unverified code. in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music in QCS405, QCS605, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SDX24, SXR1130","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00234,"percentile":0.1444,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2019-07-25T16:33:18Z","modified":"2026-06-17T02:33:35Z","products":[{"vendor":"qualcomm","product":"qcs405_firmware"},{"vendor":"qualcomm","product":"qcs605_firmware"},{"vendor":"qualcomm","product":"sd_636_firmware"},{"vendor":"qualcomm","product":"sd_665_firmware"},{"vendor":"qualcomm","product":"sd_670_firmware"},{"vendor":"qualcomm","product":"sd_675_firmware"},{"vendor":"qualcomm","product":"sd_710_firmware"},{"vendor":"qualcomm","product":"sd_712_firmware"},{"vendor":"qualcomm","product":"sd_730_firmware"},{"vendor":"qualcomm","product":"sd_820_firmware"},{"vendor":"qualcomm","product":"sd_835_firmware"},{"vendor":"qualcomm","product":"sd_845_firmware"},{"vendor":"qualcomm","product":"sd_850_firmware"},{"vendor":"qualcomm","product":"sd_855_firmware"},{"vendor":"qualcomm","product":"sd_8cx_firmware"},{"vendor":"qualcomm","product":"sda660_firmware"},{"vendor":"qualcomm","product":"sdm630_firmware"},{"vendor":"qualcomm","product":"sdm660_firmware"},{"vendor":"qualcomm","product":"sdx24_firmware"},{"vendor":"qualcomm","product":"sxr1130_firmware"},{"vendor":"qualcomm, inc.","product":"snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice \u0026 music"}],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-2281"},{"url":"https://github.com/advisories/GHSA-rp2g-3r74-42mj"}],"sources":{"cve":[{"id":"CVE-2019-2281","description":"An unauthenticated bitmap image can be loaded in to memory and subsequently cause execution of unverified code. in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music in QCS405, QCS605, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SDX24, SXR1130","status":"published","published":"2019-07-25T16:33:18Z","modified":"2024-08-04T18:42:50.925Z","updated_at":"2026-11-02T14:20:22.701371Z"}],"euvd":[{"id":"EUVD-2019-11923","description":"An unauthenticated bitmap image can be loaded in to memory and subsequently cause execution of unverified code. in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music in QCS405, QCS605, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SDX24, SXR1130","status":"published","published":"2019-07-25T16:33:18Z","modified":"2024-08-04T18:42:50Z","updated_at":"2026-11-03T03:06:56.04689Z"}],"ghsa":[{"id":"GHSA-rp2g-3r74-42mj","title":"An unauthenticated bitmap image can be loaded in to memory and subsequently cause execution of...","description":"An unauthenticated bitmap image can be loaded in to memory and subsequently cause execution of unverified code. in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music in QCS405, QCS605, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SDX24, SXR1130","status":"published","published":"2022-05-24T16:51:25Z","modified":"2023-01-28T05:05:59Z","updated_at":"2026-11-02T14:44:23.854277Z"}],"nvd":[{"id":"CVE-2019-2281","description":"An unauthenticated bitmap image can be loaded in to memory and subsequently cause execution of unverified code. in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music in QCS405, QCS605, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SDX24, SXR1130","status":"published","published":"2019-07-25T17:15:12.863Z","modified":"2026-06-17T02:33:35.423Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:05:21.892729Z"}]}}