EUVD-2026-19336
GHSA-mgp3-jcmc-q2pf
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
3DescriptionCVE.org
Memory Corruption when using deprecated DMABUF IOCTL calls to manage video memory.
AnalysisAI
Local privilege escalation via use-after-free in Qualcomm Snapdragon video memory management allows authenticated attackers with low privileges to achieve complete system compromise. The vulnerability exists in deprecated DMABUF IOCTL interfaces used for direct memory access buffer operations. No public exploit identified at time of analysis, with EPSS data unavailable for this 2026 CVE. Qualcomm addressed this in their April 2026 security bulletin.
Technical ContextAI
This vulnerability affects the Direct Memory Access Buffer (DMABUF) subsystem in Qualcomm Snapdragon chipsets, specifically within deprecated IOCTL (input/output control) system call handlers for video memory management. DMABUF is a Linux kernel framework enabling efficient buffer sharing between hardware devices without copying data between memory spaces. The CWE-416 classification indicates a use-after-free condition where the kernel continues to reference previously freed memory regions during IOCTL operations. When deprecated DMABUF IOCTL calls are invoked, the memory management logic fails to properly track buffer lifecycle, allowing subsequent operations to access deallocated memory. This memory corruption can be triggered through userspace applications or drivers making legacy IOCTL calls to the video subsystem, affecting the Snapdragon platform's media acceleration and GPU interfaces. The vulnerability is particularly concerning as DMABUF interfaces operate at the kernel level with direct hardware memory access capabilities, and the use of deprecated APIs suggests code paths that may lack modern security hardening present in current implementations.
RemediationAI
Apply security updates from Qualcomm's April 2026 Security Bulletin immediately, available at https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html. Device manufacturers and OEMs must integrate Qualcomm's chipset-level patches into their Android security patch level updates and distribute firmware updates to end users. For enterprise deployments, prioritize patching high-value devices and implement mobile device management policies to enforce update installation. If immediate patching is not feasible, consider interim mitigations including restricting installation of untrusted applications, enabling Android's security features like SELinux enforcing mode, and monitoring for suspicious privilege escalation attempts through endpoint detection tools. System administrators should audit devices to identify those using affected Snapdragon chipsets and accelerate patch deployment accordingly. Given the deprecated nature of the vulnerable IOCTL calls, organizations with custom kernel configurations should verify whether legacy DMABUF interfaces are actually enabled in their builds and consider disabling them if not required by active userspace components.
More in Snapdragon
View allBuffer overflow in Qualcomm Snapdragon firmware enables authentication bypass on adjacent networks, allowing remote unau
Local privilege escalation and memory corruption in Qualcomm Snapdragon WLAN firmware occurs when the driver parses malf
Memory corruption in Qualcomm Snapdragon Strongbox component allows local low-privileged attackers to trigger a buffer o
Local privilege escalation in Qualcomm Snapdragon chipsets stems from an out-of-bounds memory access in the Strongbox tr
Memory corruption in Qualcomm Snapdragon chipsets allows adjacent network attackers to achieve arbitrary code execution
Bootloader integrity bypass in Qualcomm Snapdragon platforms allows a high-privileged local attacker to write to a speci
Local privilege escalation via memory corruption affects Qualcomm Snapdragon platforms, where allocating memory with siz
Use-after-free memory corruption in Qualcomm Snapdragon platform driver code allows a local low-privileged process to tr
Local privilege escalation via memory corruption affects a broad range of Qualcomm Snapdragon chipsets, where a use-afte
Local privilege escalation in Qualcomm Snapdragon platforms is possible through memory corruption when processing multip
Local privilege escalation in Qualcomm Snapdragon platforms stems from an out-of-bounds read (CWE-125) triggered during
Local privilege escalation and memory corruption in Qualcomm Snapdragon platforms allows an attacker with low-privileged
Same weakness CWE-416 – Use After Free
View allSame technique Memory Corruption
View allShare
External POC / Exploit Code
Leaving vuln.today