EUVD-2026-33822
GHSA-55g2-q5j8-ww6g
Severity by source
AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionCVE.org
Memory Corruption when processing fastboot commands to set display mode.
AnalysisAI
Memory corruption in Qualcomm Snapdragon fastboot bootloader when processing commands that set the display mode allows a high-privileged local attacker with physical device access to corrupt memory and potentially execute code outside the bootloader's security context. The flaw, reported by Qualcomm and disclosed in their June 2026 security bulletin, affects Snapdragon platforms across the product line per the supplied CPE. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The device must be physically accessible to the attacker (CVSS AV:P) and placed into fastboot/bootloader mode, and the attacker must already hold high privileges (PR:H) - in practice this means an unlocked bootloader, OEM-provided unlock token, or equivalent vendor-level credentials, since locked Snapdragon bootloaders reject unauthorized flashing/configuration commands. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS vector AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H tells a nuanced story: while confidentiality, integrity, and availability impacts are all High and the scope changes (compromise extends beyond the bootloader), exploitation requires Physical access (AV:P) AND High privileges (PR:H) - typically meaning a device already in fastboot mode with an unlocked bootloader or vendor-level access. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker with physical possession of a device that has an unlocked bootloader (or vendor/developer credentials granting equivalent access) connects via USB, places the device in fastboot mode, and issues a crafted set-display-mode command with malformed arguments that corrupts bootloader memory. The resulting corruption is leveraged to bypass verified boot, install a persistent implant below the OS, or extract sensitive data from secure storage. … |
| Remediation | Patch available per vendor advisory: apply the firmware/bootloader updates referenced in the Qualcomm June 2026 Security Bulletin (https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bulletin.html) once distributed by the device OEM, as Qualcomm patches must be integrated into downstream vendor firmware before reaching end users. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Identify all Snapdragon-based devices in corporate inventory (check MDM solutions and device registries) and contact Qualcomm for patch availability timeline. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Snapdragon
View allBuffer overflow in Qualcomm Snapdragon firmware enables authentication bypass on adjacent networks, allowing remote unau
Memory corruption in Qualcomm Snapdragon Strongbox component allows local low-privileged attackers to trigger a buffer o
Local privilege escalation in Qualcomm Snapdragon chipsets stems from an out-of-bounds memory access in the Strongbox tr
Memory corruption in Qualcomm Snapdragon chipsets allows adjacent network attackers to achieve arbitrary code execution
Bootloader integrity bypass in Qualcomm Snapdragon platforms allows a high-privileged local attacker to write to a speci
Local privilege escalation in Qualcomm Snapdragon platforms is possible through memory corruption when processing multip
Local privilege escalation in Qualcomm Snapdragon platforms stems from an out-of-bounds read (CWE-125) triggered during
Local privilege escalation and memory corruption in Qualcomm Snapdragon platforms allows an attacker with low-privileged
Local privilege escalation via memory corruption in Qualcomm Snapdragon platform components allows an authenticated low-
Local memory corruption in Qualcomm Snapdragon platforms (CVE-2025-59604) allows a low-privileged local attacker to trig
Use-after-free vulnerability in Qualcomm Snapdragon chipsets enables local privilege escalation to achieve full device c
Memory corruption in Qualcomm Snapdragon allows local authenticated attackers with low privileges to achieve arbitrary c
Same technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today