EUVD-2026-19327
GHSA-v4vr-xp28-fx6j
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
3DescriptionCVE.org
Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation.
AnalysisAI
Memory corruption in Qualcomm Snapdragon auxiliary sensor I/O control processing allows authenticated local attackers to achieve arbitrary code execution with high integrity and confidentiality impact. The vulnerability stems from insufficient buffer size validation (CWE-126: Buffer Over-read) when handling sensor control commands. With CVSS 7.8 and local attack vector requiring low privileges, this represents a moderate real-world risk for privilege escalation attacks on Android and IoT devices using affected Snapdragon chipsets. No public exploit code or CISA KEV listing identified at time of analysis, though the April 2026 bulletin date suggests recent disclosure.
Technical ContextAI
This vulnerability affects Qualcomm Snapdragon System-on-Chip (SoC) platforms, specifically the auxiliary sensor subsystem that manages various device sensors (accelerometers, gyroscopes, proximity sensors, etc.). The root cause is CWE-126 (Buffer Over-read), indicating the code reads data beyond allocated buffer boundaries when processing I/O control (ioctl) commands for sensor configuration or data retrieval. Snapdragon SoCs integrate multiple sensor hubs and DSPs that process sensor data, and this control interface likely bridges userspace applications to kernel-mode or firmware-level sensor drivers. Insufficient validation of buffer size parameters in these control commands allows attackers to trigger memory corruption, potentially reading sensitive kernel memory or overwriting critical data structures. The CPE classification indicates broad impact across Qualcomm's Snapdragon product line, though specific model numbers and firmware versions require consultation of the vendor bulletin.
RemediationAI
Organizations should immediately consult the Qualcomm April 2026 Security Bulletin at https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html to identify specific affected Snapdragon chipset models and corresponding firmware patch versions. Primary remediation requires applying vendor-supplied firmware updates that include Qualcomm's fix for the sensor I/O control buffer validation issue. For Android devices, this typically manifests as Android Security Patch Level updates distributed by device OEMs-verify devices are updated to April 2026 patch level or later. Enterprise mobile device management (MDM) administrators should audit Android device patch levels and enforce update policies. For embedded IoT and automotive systems, coordinate with hardware vendors for firmware update availability and deployment procedures. As an interim risk mitigation where patching is delayed, restrict installation of untrusted applications and enforce principle of least privilege for device user accounts, though this only reduces likelihood of attacker gaining initial local access required for exploitation. No effective workaround exists to disable the vulnerable sensor control interface without breaking core device functionality.
More in Snapdragon
View allMemory corruption in Qualcomm Snapdragon Wi-Fi/NAN firmware allows an attacker within wireless range to overflow a stack
Buffer overflow in Qualcomm Snapdragon firmware enables authentication bypass on adjacent networks, allowing remote unau
Local privilege escalation and memory corruption in Qualcomm Snapdragon WLAN firmware occurs when the driver parses malf
Memory corruption in Qualcomm Snapdragon Strongbox component allows local low-privileged attackers to trigger a buffer o
Local privilege escalation in Qualcomm Snapdragon chipsets stems from an out-of-bounds memory access in the Strongbox tr
Memory corruption in Qualcomm Snapdragon chipsets allows adjacent network attackers to achieve arbitrary code execution
Bootloader integrity bypass in Qualcomm Snapdragon platforms allows a high-privileged local attacker to write to a speci
Authentication bypass in Qualcomm Snapdragon SoCs allows adjacent network attackers to exploit a cryptographic flaw duri
Memory corruption in Qualcomm Snapdragon IOCTL device driver handling enables a local low-privilege attacker to achieve
Memory corruption in Qualcomm Snapdragon's fingerprint Trusted Application (TA) allows a local low-privileged attacker t
Memory corruption in Qualcomm Snapdragon platforms occurs when a packet with a size value near the maximum allowable lim
Local privilege escalation via memory corruption affects Qualcomm Snapdragon platforms, where allocating memory with siz
Same weakness CWE-126 – Buffer Over-read
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today