EUVD-2025-209227Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
3DescriptionCVE.org
Memory corruption while processing a frame request from user.
AnalysisAI
Local privilege escalation in Qualcomm Snapdragon allows authenticated users to execute arbitrary code through memory corruption when processing frame requests. This CWE-121 stack-based buffer overflow enables complete system compromise (high confidentiality, integrity, and availability impact). No public exploit identified at time of analysis, with CVSS 7.8 indicating high severity requiring low attack complexity and low privileges. Qualcomm's April 2026 security bulletin addresses this vulnerability.
Technical ContextAI
This vulnerability stems from a CWE-121 stack-based buffer overflow occurring in Qualcomm Snapdragon's frame processing subsystem. When handling user-supplied frame requests, the affected code fails to properly validate buffer boundaries before copying data onto the stack, allowing memory corruption. Stack-based buffer overflows are particularly dangerous as they can overwrite return addresses and function pointers, enabling control-flow hijacking. The vulnerability affects Qualcomm Snapdragon products broadly (CPE: cpe:2.3:a:qualcomm,_inc.:snapdragon), which encompass mobile processors, automotive platforms, IoT chipsets, and embedded system-on-chip solutions used across billions of devices globally. The stack overflow classification indicates the corrupted memory resides in the call stack rather than heap, making exploitation techniques potentially more predictable but requiring precise payload crafting.
RemediationAI
Organizations should immediately consult Qualcomm's April 2026 Security Bulletin (https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html) for device-specific patching guidance and firmware update availability. Remediation requires applying vendor-supplied firmware updates from device manufacturers (OEMs), as Qualcomm provides patches to OEM partners who integrate them into device-specific firmware releases. For mobile devices, apply security updates through standard OS update mechanisms when available from Samsung, Xiaomi, OnePlus, Motorola, and other Snapdragon device manufacturers. For automotive and IoT deployments, coordinate with equipment vendors for firmware update schedules and deployment procedures. Until patches are applied, implement defense-in-depth controls including restricting local access privileges, enforcing application sandboxing and permission models, deploying mobile device management (MDM) solutions to control application installation, and monitoring for unusual privilege escalation attempts. In high-security environments, consider isolating or replacing unpatched devices handling sensitive data if OEM updates are unavailable or delayed beyond acceptable risk windows.
More in Snapdragon
View allMemory corruption in Qualcomm Snapdragon Wi-Fi/NAN firmware allows an attacker within wireless range to overflow a stack
Buffer overflow in Qualcomm Snapdragon firmware enables authentication bypass on adjacent networks, allowing remote unau
Local privilege escalation and memory corruption in Qualcomm Snapdragon WLAN firmware occurs when the driver parses malf
Memory corruption in Qualcomm Snapdragon Strongbox component allows local low-privileged attackers to trigger a buffer o
Local privilege escalation in Qualcomm Snapdragon chipsets stems from an out-of-bounds memory access in the Strongbox tr
Memory corruption in Qualcomm Snapdragon chipsets allows adjacent network attackers to achieve arbitrary code execution
Bootloader integrity bypass in Qualcomm Snapdragon platforms allows a high-privileged local attacker to write to a speci
Authentication bypass in Qualcomm Snapdragon SoCs allows adjacent network attackers to exploit a cryptographic flaw duri
Memory corruption in Qualcomm Snapdragon IOCTL device driver handling enables a local low-privilege attacker to achieve
Memory corruption in Qualcomm Snapdragon's fingerprint Trusted Application (TA) allows a local low-privileged attacker t
Memory corruption in Qualcomm Snapdragon platforms occurs when a packet with a size value near the maximum allowable lim
Local privilege escalation via memory corruption affects Qualcomm Snapdragon platforms, where allocating memory with siz
Same weakness CWE-121 – Stack-based Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today