EUVD-2025-210024
GHSA-v3pp-4xm4-vw3j
Severity by source
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Primary rating from Vendor (qualcomm) · only source for this CVE.
CVSS VectorVendor: qualcomm
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionCVE.org
Memory corruption in diagnostic services due to absence of input validation
AnalysisAI
Memory corruption via out-of-bounds write in Qualcomm Snapdragon diagnostic services allows a local, highly-privileged attacker to achieve high-impact compromise of confidentiality, integrity, and availability. The root cause is absent input validation in the diagnostic services component, enabling a crafted payload to corrupt memory. No public exploit identified at time of analysis, and this vulnerability is not listed in CISA KEV.
Technical ContextAI
The affected component is the diagnostic services subsystem within Qualcomm Snapdragon platforms (CPE: cpe:2.3:a:qualcomm,_inc.:snapdragon:*:*:*:*:*:*:*:*). CWE-787 (Out-of-bounds Write) identifies the root cause class: the diagnostic interface fails to validate input length or content before writing to memory, allowing a caller to write data beyond an allocated buffer boundary. This class of vulnerability is common in low-level diagnostic or debug interfaces that prioritize throughput and flexibility over strict input sanitization. On Snapdragon SoCs, diagnostic services often run at elevated trust levels, making memory corruption in this layer potentially consequential for the broader system security model.
RemediationAI
The primary remediation is to apply the patch documented in the Qualcomm June 2026 Security Bulletin (https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bulletin.html). An exact patched firmware version is not independently confirmed from the available input data - consult the bulletin for specific versioned firmware releases per affected SKU. As a compensating control where patching is not immediately possible, restricting access to diagnostic service interfaces (e.g., limiting which processes or users can invoke diagnostic APIs) would reduce the exploitable surface, though this may impact legitimate diagnostic and debugging workflows. Given the high-privilege requirement, ensuring robust access controls and audit logging around high-privileged accounts on Snapdragon-based devices provides additional defense-in-depth while awaiting patch deployment.
More in Snapdragon
View allMemory corruption in Qualcomm Snapdragon Wi-Fi/NAN firmware allows an attacker within wireless range to overflow a stack
Buffer overflow in Qualcomm Snapdragon firmware enables authentication bypass on adjacent networks, allowing remote unau
Local privilege escalation and memory corruption in Qualcomm Snapdragon WLAN firmware occurs when the driver parses malf
Memory corruption in Qualcomm Snapdragon Strongbox component allows local low-privileged attackers to trigger a buffer o
Local privilege escalation in Qualcomm Snapdragon chipsets stems from an out-of-bounds memory access in the Strongbox tr
Memory corruption in Qualcomm Snapdragon chipsets allows adjacent network attackers to achieve arbitrary code execution
Bootloader integrity bypass in Qualcomm Snapdragon platforms allows a high-privileged local attacker to write to a speci
Authentication bypass in Qualcomm Snapdragon SoCs allows adjacent network attackers to exploit a cryptographic flaw duri
Memory corruption in Qualcomm Snapdragon IOCTL device driver handling enables a local low-privilege attacker to achieve
Memory corruption in Qualcomm Snapdragon's fingerprint Trusted Application (TA) allows a local low-privileged attacker t
Memory corruption in Qualcomm Snapdragon platforms occurs when a packet with a size value near the maximum allowable lim
Local privilege escalation via memory corruption affects Qualcomm Snapdragon platforms, where allocating memory with siz
Same weakness CWE-787 – Out-of-bounds Write
View allSame technique Memory Corruption
View allShare
External POC / Exploit Code
Leaving vuln.today