What is CVE-2019-2255?

CVE-2019-2255 is a vulnerability that allows an unprivileged user to craft a bitstream that gains code execution in various Qualcomm Snapdragon devices running Android.

What is the severity of CVE-2019-2255?

The severity of CVE-2019-2255 is rated as critical.

Which devices are affected by CVE-2019-2255?

Various Qualcomm Snapdragon devices running Android are affected by CVE-2019-2255.

How can an unprivileged user exploit CVE-2019-2255?

An unprivileged user can craft a malicious bitstream that gains code execution in the affected Qualcomm Snapdragon devices.

Where can I find more information about CVE-2019-2255?

You can find more information about CVE-2019-2255 in the Android Security Bulletin for May 2019 and the Qualcomm Product Security Bulletins.

Vulnerability/
CVE-2019-2255

critical

6/5/2019

29/4/2024

CVE-2019-2255

First published: Mon May 06 2019(Updated: )

An unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains code execution in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130

Credit: product-security@qualcomm.com

Affected Software	Affected Version	How to fix
Google Android
Qualcomm Msm8909w Firmware
Qualcomm Msm8909w
Qualcomm Msm8996au Firmware
Qualcomm Msm8996au
Qualcomm Qcs605 Firmware
Qualcomm Qcs605
Qualcomm Qm215 Firmware
Qualcomm Qm215
Qualcomm Sd 210 Firmware
Qualcomm Sd 210
Qualcomm Sd 212 Firmware
Qualcomm Sd 212
Qualcomm Sd 205 Firmware
Qualcomm Sd 205
Qualcomm Sd 425 Firmware
Qualcomm Sd 425
Qualcomm Sd 427 Firmware
Qualcomm Sd 427
Qualcomm Sd 430 Firmware
Qualcomm Sd 430
Qualcomm Sd 435 Firmware
Qualcomm Sd 435
Qualcomm Sd 439 Firmware
Qualcomm Sd 439
Qualcomm Sd 429 Firmware
Qualcomm Sd 429
Qualcomm Sd 450 Firmware
Qualcomm Sd 450
Qualcomm Sd 625 Firmware
Qualcomm Sd 625
Qualcomm Sd 632 Firmware
Qualcomm Sd 632
Qualcomm Sd 636 Firmware
Qualcomm Sd 636
Qualcomm Sd 675 Firmware
Qualcomm Sd 675
Qualcomm Sd 712 Firmware
Qualcomm Sd 712
Qualcomm Sd 710 Firmware
Qualcomm Sd 710
Qualcomm Sd 670 Firmware
Qualcomm Sd 670
Qualcomm Sd 730 Firmware
Qualcomm Sd 730
Qualcomm Sd 820 Firmware
Qualcomm Sd 820
Qualcomm Sd 820a Firmware
Qualcomm Sd 820a
Qualcomm Sd 835 Firmware
Qualcomm Sd 835
Qualcomm Sd 845 Firmware
Qualcomm Sd 845
Qualcomm Sd 850 Firmware
Qualcomm Sd 850
Qualcomm Sd 855 Firmware
Qualcomm Sd 855
Qualcomm Sd 8cx Firmware
Qualcomm Sd 8cx
Qualcomm Sda660 Firmware
Qualcomm Sda660
Qualcomm Sdm439 Firmware
Qualcomm Sdm439
Qualcomm Sdm630 Firmware
Qualcomm Sdm630
Qualcomm Sdm660 Firmware
Qualcomm Sdm660
Qualcomm Snapdragon High Med 2016 Firmware
Qualcomm Snapdragon High Med 2016
Qualcomm Sxr1130 Firmware
Qualcomm Sxr1130

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is CVE-2019-2255?
CVE-2019-2255 is a vulnerability that allows an unprivileged user to craft a bitstream that gains code execution in various Qualcomm Snapdragon devices running Android.
What is the severity of CVE-2019-2255?
The severity of CVE-2019-2255 is rated as critical.
Which devices are affected by CVE-2019-2255?
Various Qualcomm Snapdragon devices running Android are affected by CVE-2019-2255.
How can an unprivileged user exploit CVE-2019-2255?
An unprivileged user can craft a malicious bitstream that gains code execution in the affected Qualcomm Snapdragon devices.
Where can I find more information about CVE-2019-2255?
You can find more information about CVE-2019-2255 in the Android Security Bulletin for May 2019 and the Qualcomm Product Security Bulletins.