EUVD-2026-33844
GHSA-mx7q-4r64-vqpj
Severity by source
AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Primary rating from Vendor (qualcomm) · only source for this CVE.
CVSS VectorVendor: qualcomm
CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionCVE.org
Memory corruption while processing fastboot OEM commands.
AnalysisAI
Memory corruption in Qualcomm Snapdragon fastboot OEM command handling allows a local attacker with high privileges and physical access to compromise device confidentiality, integrity, and availability. The CVSS 7.2 score reflects the physical attack vector (AV:P) offset by high impact and scope change, and no public exploit identified at time of analysis. Disclosure originates from Qualcomm's June 2026 security bulletin.
Technical ContextAI
Fastboot is a bootloader-level protocol used during Android device provisioning, recovery, and OEM-specific maintenance, typically reached over USB while the device is in bootloader mode. OEM commands are vendor-defined extensions to the fastboot protocol that run inside the bootloader's privileged execution context on Snapdragon SoCs. The CWE-1286 classification (improper validation of syntactic correctness of input) indicates that malformed or unexpected OEM command syntax is not adequately validated before being parsed, leading to memory corruption - consistent with the 'Buffer Overflow' tag supplied with this advisory. Affected platforms are identified by the CPE string cpe:2.3:a:qualcomm,_inc.:snapdragon, which is broad and does not enumerate specific chipset SKUs.
RemediationAI
Apply the Qualcomm-supplied bootloader/firmware fixes referenced in the June 2026 Security Bulletin (https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bulletin.html); patch availability per vendor advisory, with exact patched component versions to be confirmed against the bulletin for each Snapdragon SKU. Because fixes flow through device OEMs, downstream vendors (handset, IoT, automotive integrators) must rebuild and ship updated bootloader images, so end-user remediation depends on OEM update cadence. Compensating controls until patches land include enforcing bootloader lock (preventing untrusted operators from entering fastboot mode), restricting physical device custody in repair and refurbishment workflows, requiring secure-boot verification on the boot chain, and disabling or auditing vendor OEM fastboot commands where the platform allows - with the trade-off that bootloader lock complicates legitimate recovery and OEM command restriction may break factory provisioning or RMA tooling.
More in Snapdragon
View allMemory corruption in Qualcomm Snapdragon Wi-Fi/NAN firmware allows an attacker within wireless range to overflow a stack
Buffer overflow in Qualcomm Snapdragon firmware enables authentication bypass on adjacent networks, allowing remote unau
Local privilege escalation and memory corruption in Qualcomm Snapdragon WLAN firmware occurs when the driver parses malf
Memory corruption in Qualcomm Snapdragon Strongbox component allows local low-privileged attackers to trigger a buffer o
Local privilege escalation in Qualcomm Snapdragon chipsets stems from an out-of-bounds memory access in the Strongbox tr
Memory corruption in Qualcomm Snapdragon chipsets allows adjacent network attackers to achieve arbitrary code execution
Bootloader integrity bypass in Qualcomm Snapdragon platforms allows a high-privileged local attacker to write to a speci
Authentication bypass in Qualcomm Snapdragon SoCs allows adjacent network attackers to exploit a cryptographic flaw duri
Memory corruption in Qualcomm Snapdragon IOCTL device driver handling enables a local low-privilege attacker to achieve
Memory corruption in Qualcomm Snapdragon's fingerprint Trusted Application (TA) allows a local low-privileged attacker t
Memory corruption in Qualcomm Snapdragon platforms occurs when a packet with a size value near the maximum allowable lim
Local privilege escalation via memory corruption affects Qualcomm Snapdragon platforms, where allocating memory with siz
Same technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today