EUVD-2025-210019
GHSA-6jq8-vp5w-f9x2
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionCVE.org
Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.
AnalysisAI
Local memory corruption in Qualcomm Snapdragon platforms (CVE-2025-59604) allows a low-privileged local attacker to trigger invalid memory writes via a null pointer condition during a memory copy operation, resulting in high confidentiality, integrity, and availability impact (CVSS 7.8). The flaw is disclosed in the Qualcomm June 2026 security bulletin with no public exploit identified at time of analysis and no CISA KEV listing. While CWE-476 (null pointer dereference) typically yields denial of service, the vendor's CIA:H scoring indicates the invalid writes may be steerable into broader corruption beyond a simple crash.
Technical ContextAI
The vulnerability lies in a Snapdragon component (System-on-Chip firmware/driver stack, exact subsystem not disclosed in the public bulletin metadata) where a memory copy routine dereferences a pointer without first validating that it is non-null. Classified as CWE-476 (NULL Pointer Dereference), the bug is unusual in that the resulting invalid writes go beyond a typical read-side null crash - the copy operation writes attacker-influenced data through a corrupted destination, producing memory corruption symptoms (the tag set explicitly includes Buffer Overflow alongside Null Pointer Dereference and Denial of Service). The affected scope per the provided CPE is cpe:2.3:a:qualcomm,_inc.:snapdragon:*:*:*:*:*:*:*:* with no version constraint, meaning multiple Snapdragon SoC product lines should be assumed in-scope until Qualcomm's bulletin enumerates specific chipset IDs.
RemediationAI
Patch available per vendor advisory - apply the firmware/BSP updates published in the Qualcomm June 2026 Security Bulletin (https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bulletin.html); exact fix version strings are not enumerated in the data provided to this analysis and must be obtained from the bulletin's per-chipset tables. Because Qualcomm patches reach end users only via OEM/carrier rollouts, downstream device makers (Android Pixel/Samsung/Xiaomi/etc., automotive Tier-1s, IoT integrators) should pick up the fix in their next monthly security patch level and end users should install the corresponding OEM update as soon as it ships. Compensating controls while waiting on OEM delivery: restrict the device to trusted application sources (block sideloading, enforce Play Protect or equivalent app vetting) to limit attacker code reaching the AV:L attack surface, and on managed fleets use MDM to deny installation of unsigned/unknown-origin apps - the trade-off is reduced user flexibility but it directly raises the bar on the 'local low-privileged attacker' precondition this CVE requires.
More in Snapdragon
View allBuffer overflow in Qualcomm Snapdragon firmware enables authentication bypass on adjacent networks, allowing remote unau
Memory corruption in Qualcomm Snapdragon Strongbox component allows local low-privileged attackers to trigger a buffer o
Local privilege escalation in Qualcomm Snapdragon chipsets stems from an out-of-bounds memory access in the Strongbox tr
Memory corruption in Qualcomm Snapdragon chipsets allows adjacent network attackers to achieve arbitrary code execution
Bootloader integrity bypass in Qualcomm Snapdragon platforms allows a high-privileged local attacker to write to a speci
Local privilege escalation in Qualcomm Snapdragon platforms is possible through memory corruption when processing multip
Local privilege escalation in Qualcomm Snapdragon platforms stems from an out-of-bounds read (CWE-125) triggered during
Local privilege escalation and memory corruption in Qualcomm Snapdragon platforms allows an attacker with low-privileged
Local privilege escalation via memory corruption in Qualcomm Snapdragon platform components allows an authenticated low-
Use-after-free vulnerability in Qualcomm Snapdragon chipsets enables local privilege escalation to achieve full device c
Memory corruption in Qualcomm Snapdragon allows local authenticated attackers with low privileges to achieve arbitrary c
Memory corruption in Qualcomm Snapdragon camera subsystem allows local authenticated users to execute arbitrary code wit
Same weakness CWE-476 – NULL Pointer Dereference
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today