CVE-2019-2255: Qualcomm MSM8909W Firmware

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

An unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains code execution in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130

Affected products

  • Qualcomm MSM8909W Firmware: affected versions not specified
  • Qualcomm MSM8996AU Firmware: affected versions not specified
  • Qualcomm QCS605 Firmware: affected versions not specified
  • Qualcomm QM215 Firmware: affected versions not specified
  • Qualcomm Sd 205 Firmware: affected versions not specified
  • Qualcomm Sd 210 Firmware: affected versions not specified
  • Qualcomm Sd 212 Firmware: affected versions not specified
  • Qualcomm Sd 425 Firmware: affected versions not specified
  • Qualcomm Sd 427 Firmware: affected versions not specified
  • Qualcomm Sd 429 Firmware: affected versions not specified
  • Qualcomm Sd 430 Firmware: affected versions not specified
  • Qualcomm Sd 435 Firmware: affected versions not specified
  • Qualcomm Sd 439 Firmware: affected versions not specified
  • Qualcomm Sd 450 Firmware: affected versions not specified
  • Qualcomm Sd 625 Firmware: affected versions not specified
  • Qualcomm Sd 632 Firmware: affected versions not specified
  • Qualcomm Sd 636 Firmware: affected versions not specified
  • Qualcomm Sd 670 Firmware: affected versions not specified
  • Qualcomm Sd 675 Firmware: affected versions not specified
  • Qualcomm Sd 710 Firmware: affected versions not specified
  • Qualcomm Sd 712 Firmware: affected versions not specified
  • Qualcomm Sd 730 Firmware: affected versions not specified
  • Qualcomm Sd 820 Firmware: affected versions not specified
  • Qualcomm Sd 820a Firmware: affected versions not specified
  • Qualcomm Sd 835 Firmware: affected versions not specified
  • and 10 more

Published 2019-06-14. Last modified 2026-06-17.