EUVD-2026-33843
GHSA-m8fr-cgc2-p8r8
Severity by source
AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Primary rating from Vendor (qualcomm) · only source for this CVE.
CVSS VectorVendor: qualcomm
CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionCVE.org
Memory Corruption when processing display command line information due to improper initialization of a variable.
AnalysisAI
Local privilege escalation in Qualcomm Snapdragon platforms stems from a stack-based memory corruption triggered while processing display command line information with an uninitialized variable. With CVSS 7.2 and a physical attack vector requiring high privileges, the flaw allows a privileged local attacker to corrupt memory and impact confidentiality, integrity, and availability across a changed security scope. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV.
Technical ContextAI
The vulnerability resides within the display subsystem of Qualcomm Snapdragon platforms (cpe:2.3:a:qualcomm,_inc.:snapdragon), which parses command line information passed to the display driver/firmware during initialization or runtime control flows. CWE-121 (Stack-based Buffer Overflow), combined with the description's reference to improper variable initialization, indicates that an uninitialized stack variable is used as a length, index, or pointer when copying or interpreting display command line data, causing adjacent stack memory (including saved return addresses or function pointers) to be overwritten. Snapdragon SoCs are deployed broadly across mobile handsets, automotive, IoT, and compute platforms, so the affected display command line handler is reachable from any privileged userland or kernel-adjacent component that can submit display commands.
RemediationAI
Patch available per vendor advisory - apply the fixes published in Qualcomm's June 2026 Security Bulletin (https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bulletin.html) by coordinating with the device OEM to absorb the updated Snapdragon BSP/firmware containing the corrected display command line handler, as exact fixed component versions are not enumerated in the available intelligence and depend on OEM integration timelines. Until OEM patches are deployed, restrict physical access to affected devices (the attack vector is AV:P), tightly limit which privileged components/users can submit display command line input, disable or gate diagnostic, factory, or developer display interfaces in production builds, and on platforms with verified boot and SELinux/sepolicy enforce strict policies on the display driver entry points; note that disabling diagnostic display interfaces may break legitimate manufacturing, service, and debugging workflows and should be staged accordingly.
More in Snapdragon
View allMemory corruption in Qualcomm Snapdragon Wi-Fi/NAN firmware allows an attacker within wireless range to overflow a stack
Buffer overflow in Qualcomm Snapdragon firmware enables authentication bypass on adjacent networks, allowing remote unau
Local privilege escalation and memory corruption in Qualcomm Snapdragon WLAN firmware occurs when the driver parses malf
Memory corruption in Qualcomm Snapdragon Strongbox component allows local low-privileged attackers to trigger a buffer o
Local privilege escalation in Qualcomm Snapdragon chipsets stems from an out-of-bounds memory access in the Strongbox tr
Memory corruption in Qualcomm Snapdragon chipsets allows adjacent network attackers to achieve arbitrary code execution
Bootloader integrity bypass in Qualcomm Snapdragon platforms allows a high-privileged local attacker to write to a speci
Authentication bypass in Qualcomm Snapdragon SoCs allows adjacent network attackers to exploit a cryptographic flaw duri
Memory corruption in Qualcomm Snapdragon IOCTL device driver handling enables a local low-privilege attacker to achieve
Memory corruption in Qualcomm Snapdragon's fingerprint Trusted Application (TA) allows a local low-privileged attacker t
Memory corruption in Qualcomm Snapdragon platforms occurs when a packet with a size value near the maximum allowable lim
Local privilege escalation via memory corruption affects Qualcomm Snapdragon platforms, where allocating memory with siz
Same weakness CWE-121 – Stack-based Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today