EUVD-2025-209629Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Local malicious app with low privilege triggers on-device memory corruption (AV:L/PR:L); SSVC total technical impact supports C:H/I:H/A:H with unchanged scope.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
9DescriptionNVD
Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.
AnalysisAI
Memory corruption in Qualcomm Snapdragon chipsets can be triggered by a local attacker with low privileges, potentially leading to arbitrary code execution within the context of the affected component. The flaw occurs when the size of a previously allocated buffer is dynamically changed while its contents are concurrently being modified, a condition that requires the attacker to reach a specific code path. No public exploit code or active exploitation has been identified, and the EPSS score is very low (0.01%), indicating minimal immediate risk; the SSVC assessment marks it as non-automatable, limiting scalable attacks.
Technical ContextAI
This is a memory corruption issue assigned CWE-120 (classic buffer overflow) in Qualcomm Snapdragon firmware. The specific mechanism involves dynamically resizing an already allocated buffer while its contents are being modified, which can lead to heap or stack corruption due to missing synchronization or improper reallocation handling. Such a race-condition-like scenario could allow an attacker to corrupt memory and, under certain conditions, achieve code execution with low privileges. The CPE cpe:2.3:a:qualcomm,_inc.:snapdragon:*:*:*:*:*:*:*:* indicates that the vulnerability affects a broad range of Snapdragon processors and platforms, spanning mobile, compute, automotive, and IoT chipsets. Note that while CWE-120 is the assigned root cause class, the dynamic resizing context suggests a possible underlying synchronization flaw or reallocation-during-write issue.
RemediationAI
Vendor-released patch: as per Qualcomm's May 2026 security bulletin (refer to advisory at https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2026-bulletin.html). Qualcomm has published a security bulletin addressing this issue, and OEMs are expected to distribute firmware updates. End users should apply the latest firmware update provided by their device manufacturer or Qualcomm as soon as it becomes available. As a compensating control, restrict the ability to execute untrusted local code on affected devices (e.g., enforce strict app sandboxing, disable developer options for untrusted users, or tightly control application installation) to reduce the attack surface, since exploitation requires local access with low privileges. No other workarounds are available; updating to the patched firmware version is the only complete fix. Note that no exact patched version number is specified in the input data; consult the vendor advisory for detailed version information.
More in Snapdragon
View allRemote code execution in Qualcomm Snapdragon-based products allows unauthenticated network attackers to bypass authoriza
Memory corruption in Qualcomm Snapdragon Wi-Fi/NAN firmware allows an attacker within wireless range to overflow a stack
Buffer overflow in Qualcomm Snapdragon firmware enables authentication bypass on adjacent networks, allowing remote unau
Local privilege escalation in Qualcomm Snapdragon platforms allows a low-privilege on-device process or app to cross a t
Privilege escalation in Qualcomm Snapdragon devices allows a local low-privilege attacker to cross security boundaries a
Local privilege escalation and memory corruption in Qualcomm Snapdragon WLAN firmware occurs when the driver parses malf
Stack-based memory corruption in Qualcomm Snapdragon firmware allows a locally-resident, low-privileged process to overf
Memory corruption in Qualcomm Snapdragon Strongbox component allows local low-privileged attackers to trigger a buffer o
Local privilege escalation in Qualcomm Snapdragon chipsets stems from an out-of-bounds memory access in the Strongbox tr
Memory corruption in Qualcomm Snapdragon chipsets allows adjacent network attackers to achieve arbitrary code execution
Bootloader integrity bypass in Qualcomm Snapdragon platforms allows a high-privileged local attacker to write to a speci
Authentication bypass in Qualcomm Snapdragon SoCs allows adjacent network attackers to exploit a cryptographic flaw duri
Same weakness CWE-120 – Classic Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today