{"id":"CVE-2019-2281","state":"PUBLISHED","title":"An unauthenticated bitmap image can be loaded in to memory and subsequently cause execution of unverified code. in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer ","description":"An unauthenticated bitmap image can be loaded in to memory and subsequently cause execution of unverified code. in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in QCS405, QCS605, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SDX24, SXR1130","publishedAt":"2019-07-25T16:33:18.000Z","updatedAt":"2024-08-04T18:42:50.925Z","severity":null,"assigner":"qualcomm","products":["Qualcomm, Inc. Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music"],"affected":[{"vendor":"Qualcomm, Inc.","product":"Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music","versions":[{"version":"QCS405, QCS605, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SDX24, SXR1130","status":"affected"}]}],"references":["https://www.qualcomm.com/company/product-security/bulletins"],"weaknesses":[],"ingestedAt":"2026-10-29T19:45:56.293Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2019/2xxx/CVE-2019-2281.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2019-2281","state":"PUBLISHED","datePublished":"2019-07-25T16:33:18.000Z","dateUpdated":"2024-08-04T18:42:50.925Z","assignerShortName":"qualcomm","assignerOrgId":"2cfc7d3e-20d3-47ac-8db7-1b7285aff15f","dateReserved":"2018-12-10T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"An unauthenticated bitmap image can be loaded in to memory and subsequently cause execution of unverified code. in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in QCS405, QCS605, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SDX24, SXR1130"}],"affected":[{"vendor":"Qualcomm, Inc.","product":"Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music","versions":[{"version":"QCS405, QCS605, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SDX24, SXR1130","status":"affected"}]}],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins","tags":["x_refsource_CONFIRM"]}],"problemTypes":[{"descriptions":[{"description":"Buffer Copy Without Checking Size of Input in Boot","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"qualcomm","dateUpdated":"2019-07-25T16:33:18.000Z","orgId":"2cfc7d3e-20d3-47ac-8db7-1b7285aff15f"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"product-security@qualcomm.com","ID":"CVE-2019-2281","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music","version":{"version_data":[{"version_value":"QCS405, QCS605, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SDX24, SXR1130"}]}}]},"vendor_name":"Qualcomm, Inc."}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"An unauthenticated bitmap image can be loaded in to memory and subsequently cause execution of unverified code. in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in QCS405, QCS605, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SDX24, SXR1130"}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Buffer Copy Without Checking Size of Input in Boot"}]}]},"references":{"reference_data":[{"name":"https://www.qualcomm.com/company/product-security/bulletins","refsource":"CONFIRM","url":"https://www.qualcomm.com/company/product-security/bulletins"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T18:42:50.925Z"}}]}}}