EUVD-2026-33824
GHSA-wfc2-qmjr-85gw
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionCVE.org
Memory corruption while processing multiple IOCTL command for escape operations.
AnalysisAI
Local privilege escalation in Qualcomm Snapdragon platforms is possible through memory corruption when processing multiple IOCTL commands for escape operations. The flaw, reported by Qualcomm in its June 2026 security bulletin, affects Snapdragon graphics/driver components and can be triggered by a low-privileged local user to achieve high impact on confidentiality, integrity, and availability. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires local code execution on a Qualcomm Snapdragon device with the ability to open the affected driver's device node and issue IOCTL escape commands (PR:L, AV:L) - typically achievable from an unprivileged app or shell on Android/embedded Snapdragon platforms. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H scores 7.8 (High) and describes local exploitation by a low-privileged attacker with no user interaction, yielding full CIA impact - characteristic of a local privilege escalation rather than a remote attack. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | A malicious Android application installed with standard permissions, or an attacker who has obtained an unprivileged local shell on a Snapdragon-based device, opens the affected Qualcomm driver device node and issues a crafted sequence of multiple escape IOCTL commands. The resulting out-of-bounds write corrupts kernel memory in a controlled way, allowing the attacker to elevate from low-privilege user context to kernel or system privileges and fully compromise the device. … |
| Remediation | Patch available per vendor advisory - apply the fixes referenced in the Qualcomm June 2026 security bulletin (https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bulletin.html) once they are integrated by the device OEM, since Snapdragon driver fixes typically reach end users via Android monthly security patch levels or OEM firmware updates rather than directly from Qualcomm. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
24 hours: Inventory all Snapdragon-based devices in your environment and identify affected OS/firmware versions; contact device manufacturers and Qualcomm for patched firmware availability and ETA. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Snapdragon
View allBuffer overflow in Qualcomm Snapdragon firmware enables authentication bypass on adjacent networks, allowing remote unau
Memory corruption in Qualcomm Snapdragon Strongbox component allows local low-privileged attackers to trigger a buffer o
Local privilege escalation in Qualcomm Snapdragon chipsets stems from an out-of-bounds memory access in the Strongbox tr
Memory corruption in Qualcomm Snapdragon chipsets allows adjacent network attackers to achieve arbitrary code execution
Bootloader integrity bypass in Qualcomm Snapdragon platforms allows a high-privileged local attacker to write to a speci
Local privilege escalation in Qualcomm Snapdragon platforms stems from an out-of-bounds read (CWE-125) triggered during
Local privilege escalation and memory corruption in Qualcomm Snapdragon platforms allows an attacker with low-privileged
Local privilege escalation via memory corruption in Qualcomm Snapdragon platform components allows an authenticated low-
Local memory corruption in Qualcomm Snapdragon platforms (CVE-2025-59604) allows a low-privileged local attacker to trig
Use-after-free vulnerability in Qualcomm Snapdragon chipsets enables local privilege escalation to achieve full device c
Memory corruption in Qualcomm Snapdragon allows local authenticated attackers with low privileges to achieve arbitrary c
Memory corruption in Qualcomm Snapdragon camera subsystem allows local authenticated users to execute arbitrary code wit
Same weakness CWE-787 – Out-of-bounds Write
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today