EUVD-2026-19325
GHSA-p7h3-2rm6-r8vf
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
3DescriptionCVE.org
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.
AnalysisAI
Local privilege escalation in Qualcomm Snapdragon products allows authenticated attackers to gain kernel-level code execution through memory corruption during IOCTL processing. The vulnerability stems from unchecked buffer size validation when writing to output buffers, enabling high-impact compromise of confidentiality, integrity, and availability on affected mobile and embedded devices. With a CVSS score of 7.8 and low attack complexity (AC:L), this represents a significant privilege escalation vector for malicious applications or local users, though no public exploit or active exploitation has been identified at time of analysis.
Technical ContextAI
This vulnerability affects Qualcomm's IOCTL (Input/Output Control) handling mechanisms in Snapdragon chipset drivers, which provide the interface between user-space applications and kernel-space device drivers. The root cause is CWE-126 (Buffer Over-read), indicating the driver reads beyond allocated buffer boundaries when processing IOCTL requests. While classified as a buffer over-read, the description emphasizes memory corruption during output buffer access without size validation, suggesting the vulnerability may also involve unsafe writes (buffer overflow characteristics). IOCTL handlers in mobile SoC platforms typically manage hardware abstraction for components like GPU, modem, and multimedia processors. The CPE identifier targets Qualcomm Inc.'s Snapdragon product line broadly, suggesting the flaw exists in common driver code shared across multiple chipset generations used in Android devices and IoT platforms.
RemediationAI
Primary remediation requires applying vendor-supplied firmware updates from Qualcomm's April 2026 security bulletin (https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html) once published. Organizations should monitor this bulletin URL for release, then coordinate with device OEMs (smartphone manufacturers, automotive suppliers, IoT vendors) to obtain integrated patches, as Snapdragon firmware updates typically deploy through OEM-specific software channels rather than direct end-user downloads. Until patches become available, risk mitigation strategies include restricting installation of untrusted applications through mobile device management (MDM) policies, enforcing principle of least privilege for device accounts, disabling USB debugging and ADB access on production devices, and implementing runtime application monitoring to detect abnormal IOCTL activity. For enterprise Android deployments, consider application whitelisting to prevent malicious local apps from attempting exploitation. No temporary workaround can eliminate the vulnerability without patching the affected driver code.
More in Snapdragon
View allMemory corruption in Qualcomm Snapdragon Wi-Fi/NAN firmware allows an attacker within wireless range to overflow a stack
Buffer overflow in Qualcomm Snapdragon firmware enables authentication bypass on adjacent networks, allowing remote unau
Local privilege escalation and memory corruption in Qualcomm Snapdragon WLAN firmware occurs when the driver parses malf
Memory corruption in Qualcomm Snapdragon Strongbox component allows local low-privileged attackers to trigger a buffer o
Local privilege escalation in Qualcomm Snapdragon chipsets stems from an out-of-bounds memory access in the Strongbox tr
Memory corruption in Qualcomm Snapdragon chipsets allows adjacent network attackers to achieve arbitrary code execution
Bootloader integrity bypass in Qualcomm Snapdragon platforms allows a high-privileged local attacker to write to a speci
Authentication bypass in Qualcomm Snapdragon SoCs allows adjacent network attackers to exploit a cryptographic flaw duri
Memory corruption in Qualcomm Snapdragon IOCTL device driver handling enables a local low-privilege attacker to achieve
Memory corruption in Qualcomm Snapdragon's fingerprint Trusted Application (TA) allows a local low-privileged attacker t
Memory corruption in Qualcomm Snapdragon platforms occurs when a packet with a size value near the maximum allowable lim
Local privilege escalation via memory corruption affects Qualcomm Snapdragon platforms, where allocating memory with siz
Same weakness CWE-126 – Buffer Over-read
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today