EUVD-2026-19325
GHSA-p7h3-2rm6-r8vf
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
3Tags
Description
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.
Analysis
Local privilege escalation in Qualcomm Snapdragon products allows authenticated attackers to gain kernel-level code execution through memory corruption during IOCTL processing. The vulnerability stems from unchecked buffer size validation when writing to output buffers, enabling high-impact compromise of confidentiality, integrity, and availability on affected mobile and embedded devices. …
Sign in for full analysis, threat intelligence, and remediation guidance.
Remediation
Within 24 hours: Inventory all mobile devices, IoT hardware, and embedded systems using Qualcomm Snapdragon chipsets in your environment and identify affected product models. Within 7 days: Contact Qualcomm and affected OEM vendors (Samsung, Motorola, OnePlus, etc.) to determine if patches are available for your specific device models and Android security patch levels. …
Sign in for detailed remediation steps.
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today