EUVD-2025-209227Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
3DescriptionCVE.org
Memory corruption while processing a frame request from user.
AnalysisAI
Local privilege escalation in Qualcomm Snapdragon allows authenticated users to execute arbitrary code through memory corruption when processing frame requests. This CWE-121 stack-based buffer overflow enables complete system compromise (high confidentiality, integrity, and availability impact). No public exploit identified at time of analysis, with CVSS 7.8 indicating high severity requiring low attack complexity and low privileges. Qualcomm's April 2026 security bulletin addresses this vulnerability.
Technical ContextAI
This vulnerability stems from a CWE-121 stack-based buffer overflow occurring in Qualcomm Snapdragon's frame processing subsystem. When handling user-supplied frame requests, the affected code fails to properly validate buffer boundaries before copying data onto the stack, allowing memory corruption. Stack-based buffer overflows are particularly dangerous as they can overwrite return addresses and function pointers, enabling control-flow hijacking. The vulnerability affects Qualcomm Snapdragon products broadly (CPE: cpe:2.3:a:qualcomm,_inc.:snapdragon), which encompass mobile processors, automotive platforms, IoT chipsets, and embedded system-on-chip solutions used across billions of devices globally. The stack overflow classification indicates the corrupted memory resides in the call stack rather than heap, making exploitation techniques potentially more predictable but requiring precise payload crafting.
RemediationAI
Organizations should immediately consult Qualcomm's April 2026 Security Bulletin (https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html) for device-specific patching guidance and firmware update availability. Remediation requires applying vendor-supplied firmware updates from device manufacturers (OEMs), as Qualcomm provides patches to OEM partners who integrate them into device-specific firmware releases. For mobile devices, apply security updates through standard OS update mechanisms when available from Samsung, Xiaomi, OnePlus, Motorola, and other Snapdragon device manufacturers. For automotive and IoT deployments, coordinate with equipment vendors for firmware update schedules and deployment procedures. Until patches are applied, implement defense-in-depth controls including restricting local access privileges, enforcing application sandboxing and permission models, deploying mobile device management (MDM) solutions to control application installation, and monitoring for unusual privilege escalation attempts. In high-security environments, consider isolating or replacing unpatched devices handling sensitive data if OEM updates are unavailable or delayed beyond acceptable risk windows.
More in Snapdragon
View allBuffer overflow in Qualcomm Snapdragon firmware enables authentication bypass on adjacent networks, allowing remote unau
Memory corruption in Qualcomm Snapdragon Strongbox component allows local low-privileged attackers to trigger a buffer o
Local privilege escalation in Qualcomm Snapdragon chipsets stems from an out-of-bounds memory access in the Strongbox tr
Memory corruption in Qualcomm Snapdragon chipsets allows adjacent network attackers to achieve arbitrary code execution
Bootloader integrity bypass in Qualcomm Snapdragon platforms allows a high-privileged local attacker to write to a speci
Local privilege escalation in Qualcomm Snapdragon platforms is possible through memory corruption when processing multip
Local privilege escalation in Qualcomm Snapdragon platforms stems from an out-of-bounds read (CWE-125) triggered during
Local privilege escalation and memory corruption in Qualcomm Snapdragon platforms allows an attacker with low-privileged
Local privilege escalation via memory corruption in Qualcomm Snapdragon platform components allows an authenticated low-
Local memory corruption in Qualcomm Snapdragon platforms (CVE-2025-59604) allows a low-privileged local attacker to trig
Use-after-free vulnerability in Qualcomm Snapdragon chipsets enables local privilege escalation to achieve full device c
Memory corruption in Qualcomm Snapdragon allows local authenticated attackers with low privileges to achieve arbitrary c
Same weakness CWE-121 – Stack-based Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today