EUVD-2025-210026
GHSA-6q6f-f265-rx66
Severity by source
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Primary rating from Vendor (qualcomm) · only source for this CVE.
CVSS VectorVendor: qualcomm
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionCVE.org
Memory Corruption when output buffer size is smaller than input buffer size during data copying operation.
AnalysisAI
Stack-based buffer overflow in Qualcomm Snapdragon corrupts memory during a data copy operation when the output buffer is sized smaller than the input buffer, enabling a high-privileged local attacker to achieve full compromise of confidentiality, integrity, and availability on affected devices. Rooted in CWE-121, this vulnerability can allow control-flow hijacking via stack memory overwrite on Snapdragon-based platforms. No public exploit identified at time of analysis and no CISA KEV listing, but the high-impact triad (C:H/I:H/A:H) warrants prompt patching in environments where privileged access is shared or contested.
Technical ContextAI
The affected product is Qualcomm Snapdragon (CPE: cpe:2.3:a:qualcomm,_inc.:snapdragon:*:*:*:*:*:*:*:*), which is a family of system-on-chip platforms used widely in mobile and embedded devices. The root cause is CWE-121 (Stack-Based Buffer Overflow): during a data copying operation, the software fails to validate that the destination (output) buffer is large enough to hold the source (input) data. When an attacker controls or influences the input buffer size relative to the stack-allocated output buffer, the excess data overwrites adjacent stack memory. This can corrupt return addresses, saved frame pointers, or function pointers, enabling control-flow redirection. Stack-based buffer overflows are a well-understood but high-severity vulnerability class, particularly on platforms where stack canaries, ASLR, or CFI mitigations may be inconsistently applied across firmware components.
RemediationAI
The primary remediation is to apply the firmware or driver update detailed in the Qualcomm June 2026 Security Bulletin at https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bulletin.html. An exact patched firmware or component version number is not independently confirmable from available data - consult the bulletin directly for versioned fix details, as Qualcomm typically distributes patches to OEM partners who then release device-specific updates. As a compensating control where patching is delayed, restrict high-privileged local access on Snapdragon-based devices to only trusted, audited accounts, since exploitation requires PR:H (high privileges) per the CVSS vector; reducing the number of privileged users directly reduces the exploitable attack surface. No documented workarounds beyond access restriction are available in the referenced data. Note that access restriction does not eliminate the vulnerability and should not substitute for patching.
More in Snapdragon
View allMemory corruption in Qualcomm Snapdragon Wi-Fi/NAN firmware allows an attacker within wireless range to overflow a stack
Buffer overflow in Qualcomm Snapdragon firmware enables authentication bypass on adjacent networks, allowing remote unau
Local privilege escalation and memory corruption in Qualcomm Snapdragon WLAN firmware occurs when the driver parses malf
Memory corruption in Qualcomm Snapdragon Strongbox component allows local low-privileged attackers to trigger a buffer o
Local privilege escalation in Qualcomm Snapdragon chipsets stems from an out-of-bounds memory access in the Strongbox tr
Memory corruption in Qualcomm Snapdragon chipsets allows adjacent network attackers to achieve arbitrary code execution
Bootloader integrity bypass in Qualcomm Snapdragon platforms allows a high-privileged local attacker to write to a speci
Authentication bypass in Qualcomm Snapdragon SoCs allows adjacent network attackers to exploit a cryptographic flaw duri
Memory corruption in Qualcomm Snapdragon IOCTL device driver handling enables a local low-privilege attacker to achieve
Memory corruption in Qualcomm Snapdragon's fingerprint Trusted Application (TA) allows a local low-privileged attacker t
Memory corruption in Qualcomm Snapdragon platforms occurs when a packet with a size value near the maximum allowable lim
Local privilege escalation via memory corruption affects Qualcomm Snapdragon platforms, where allocating memory with siz
Same weakness CWE-121 – Stack-based Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today