EUVD-2026-33846
GHSA-44rg-9789-64x6
Severity by source
AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Primary rating from Vendor (qualcomm) · only source for this CVE.
CVSS VectorVendor: qualcomm
Lifecycle Timeline
1DescriptionCVE.org
Memory corruption while processing fastboot commands with invalid input.
AnalysisAI
Memory corruption in Qualcomm Snapdragon fastboot bootloader handling allows a privileged local attacker with physical access to corrupt memory by issuing malformed fastboot commands, with scope change (CVSS S:C) indicating impact extends beyond the bootloader's security boundary. The flaw was disclosed by Qualcomm in the June 2026 security bulletin and carries a CVSS 3.1 base score of 7.2 (High). No public exploit identified at time of analysis, and the issue is not listed in CISA KEV.
Technical ContextAI
Fastboot is the low-level protocol used in Qualcomm-based Android and embedded devices to communicate with the bootloader over USB (or occasionally TCP), supporting operations such as flashing partitions, erasing storage, and unlocking. The CWE-1286 classification ('Improper Validation of Syntactic Correctness of Input') indicates the bootloader's command parser fails to validate the syntactic structure of incoming fastboot commands, allowing malformed input to corrupt adjacent memory regions. Because fastboot runs before the OS kernel is loaded and has direct access to flash storage and secure boot state, corruption in this layer can undermine secure boot, verified boot, and TEE isolation. The affected CPE (cpe:2.3:a:qualcomm,_inc.:snapdragon) covers Snapdragon SoCs broadly, suggesting the defective code lives in shared Qualcomm bootloader components used across many chipset families.
RemediationAI
Apply the patch available per Qualcomm's June 2026 Security Bulletin (https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bulletin.html); released patched bootloader/firmware versions are published per-chipset in that bulletin and must be obtained from each device OEM as integrated firmware updates, since end users cannot patch the Qualcomm bootloader directly. As compensating controls until OEM updates land, keep the bootloader locked (verified/secure boot enabled) on all production devices to prevent attackers from reaching fastboot in a privileged state; enforce strong device encryption with hardware-backed keys so post-boot data remains protected even if the bootloader is corrupted; restrict physical access to high-value devices and apply tamper-evident seals for fleets in transit; and on managed Android fleets, use MDM attestation (Play Integrity / SafetyNet hardware attestation) to detect bootloader unlock or rollback. The trade-off of these controls is operational: locked bootloaders block legitimate developer workflows, and attestation policies may flag devices undergoing authorized recovery.
More in Snapdragon
View allRemote code execution in Qualcomm Snapdragon-based products allows unauthenticated network attackers to bypass authoriza
Memory corruption in Qualcomm Snapdragon Wi-Fi/NAN firmware allows an attacker within wireless range to overflow a stack
Buffer overflow in Qualcomm Snapdragon firmware enables authentication bypass on adjacent networks, allowing remote unau
Local privilege escalation in Qualcomm Snapdragon platforms allows a low-privilege on-device process or app to cross a t
Privilege escalation in Qualcomm Snapdragon devices allows a local low-privilege attacker to cross security boundaries a
Local privilege escalation and memory corruption in Qualcomm Snapdragon WLAN firmware occurs when the driver parses malf
Stack-based memory corruption in Qualcomm Snapdragon firmware allows a locally-resident, low-privileged process to overf
Memory corruption in Qualcomm Snapdragon Strongbox component allows local low-privileged attackers to trigger a buffer o
Local privilege escalation in Qualcomm Snapdragon chipsets stems from an out-of-bounds memory access in the Strongbox tr
Memory corruption in Qualcomm Snapdragon chipsets allows adjacent network attackers to achieve arbitrary code execution
Bootloader integrity bypass in Qualcomm Snapdragon platforms allows a high-privileged local attacker to write to a speci
Authentication bypass in Qualcomm Snapdragon SoCs allows adjacent network attackers to exploit a cryptographic flaw duri
Same technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today