EUVD-2025-210025
GHSA-743g-g358-85hj
Severity by source
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Primary rating from Vendor (qualcomm) · only source for this CVE.
CVSS VectorVendor: qualcomm
Lifecycle Timeline
2DescriptionCVE.org
Memory corruption in windows drivers while sending incorrect trusted application request
AnalysisAI
Stack-based buffer overflow in Qualcomm Snapdragon Windows drivers allows a locally authenticated high-privilege attacker to cause memory corruption by sending a malformed trusted application request. The vulnerability affects Snapdragon-based systems running Windows drivers and can result in complete compromise of confidentiality, integrity, and availability. No public exploit code exists and no active exploitation has been confirmed at time of analysis.
Technical ContextAI
The vulnerability resides in Windows kernel-mode drivers shipped with Qualcomm Snapdragon hardware (CPE: cpe:2.3:a:qualcomm,_inc.:snapdragon:*:*:*:*:*:*:*:*). CWE-121 identifies the root cause as a stack-based buffer overflow - an attacker-controlled input exceeds the bounds of a stack-allocated buffer within the driver's trusted application request handling path, overwriting adjacent stack data including return addresses or control flow pointers. Trusted application (TA) requests are a mechanism associated with Trusted Execution Environment (TEE) interfaces (such as Qualcomm's QTEE/TrustZone), where the Windows driver acts as a conduit passing requests from the normal world to the secure enclave. A malformed or oversized request that bypasses length validation before being copied onto the stack triggers the overflow. The 'Microsoft' tag confirms this is specific to the Windows driver stack, distinct from Android/Linux Snapdragon driver paths.
RemediationAI
The primary remediation is to apply the updated Qualcomm Snapdragon Windows drivers as detailed in the Qualcomm June 2026 Security Bulletin (https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bulletin.html). An exact patched driver version is not independently confirmable from the provided data - consult the bulletin directly for version specifics. OEM system updates (via Windows Update or manufacturer-specific update utilities) are the typical delivery mechanism for Qualcomm driver patches on Windows devices. As a compensating control where patching is not immediately feasible, restricting which accounts hold local administrator privileges reduces the attack surface, since PR:H is a hard prerequisite; enforcing least-privilege access policies and using Privileged Access Workstation (PAW) models limits exposure. Driver blocklist enforcement via Windows Defender Application Control (WDAC) could be considered if a vulnerable driver version can be specifically identified, though this may impact device functionality.
More in Snapdragon
View allMemory corruption in Qualcomm Snapdragon Wi-Fi/NAN firmware allows an attacker within wireless range to overflow a stack
Buffer overflow in Qualcomm Snapdragon firmware enables authentication bypass on adjacent networks, allowing remote unau
Local privilege escalation and memory corruption in Qualcomm Snapdragon WLAN firmware occurs when the driver parses malf
Memory corruption in Qualcomm Snapdragon Strongbox component allows local low-privileged attackers to trigger a buffer o
Local privilege escalation in Qualcomm Snapdragon chipsets stems from an out-of-bounds memory access in the Strongbox tr
Memory corruption in Qualcomm Snapdragon chipsets allows adjacent network attackers to achieve arbitrary code execution
Bootloader integrity bypass in Qualcomm Snapdragon platforms allows a high-privileged local attacker to write to a speci
Authentication bypass in Qualcomm Snapdragon SoCs allows adjacent network attackers to exploit a cryptographic flaw duri
Memory corruption in Qualcomm Snapdragon IOCTL device driver handling enables a local low-privilege attacker to achieve
Memory corruption in Qualcomm Snapdragon's fingerprint Trusted Application (TA) allows a local low-privileged attacker t
Memory corruption in Qualcomm Snapdragon platforms occurs when a packet with a size value near the maximum allowable lim
Local privilege escalation via memory corruption affects Qualcomm Snapdragon platforms, where allocating memory with siz
Same weakness CWE-121 – Stack-based Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today