EUVD-2026-33822
GHSA-55g2-q5j8-ww6g
Severity by source
AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Primary rating from Vendor (qualcomm) · only source for this CVE.
CVSS VectorVendor: qualcomm
CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionCVE.org
Memory Corruption when processing fastboot commands to set display mode.
AnalysisAI
Memory corruption in Qualcomm Snapdragon fastboot bootloader when processing commands that set the display mode allows a high-privileged local attacker with physical device access to corrupt memory and potentially execute code outside the bootloader's security context. The flaw, reported by Qualcomm and disclosed in their June 2026 security bulletin, affects Snapdragon platforms across the product line per the supplied CPE. No public exploit has been identified at the time of analysis, and the CVSS 7.2 score reflects the high privilege and physical access barriers that limit broad exploitation.
Technical ContextAI
Fastboot is a protocol exposed by Qualcomm's bootloader (typically over USB while the device is in a special boot mode) used for flashing partitions, unlocking devices, and configuring boot-time parameters such as display mode. The root cause maps to CWE-1286 (Improper Validation of Syntactic Correctness of Input), meaning the bootloader does not properly validate the structure of fastboot command arguments related to display mode handling, leading to memory corruption - consistent with the 'Buffer Overflow' tag in the intelligence data. Because the vulnerability resides in the bootloader, successful exploitation occurs below the operating system trust boundary, which is reflected in the CVSS Scope:Changed designation. The affected CPE (cpe:2.3:a:qualcomm,_inc.:snapdragon:*:*:*:*:*:*:*:*) indicates the issue spans Snapdragon platforms broadly rather than a single SoC generation.
RemediationAI
Patch available per vendor advisory: apply the firmware/bootloader updates referenced in the Qualcomm June 2026 Security Bulletin (https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bulletin.html) once distributed by the device OEM, as Qualcomm patches must be integrated into downstream vendor firmware before reaching end users. Until OEM updates ship, the most effective compensating controls are ensuring the bootloader remains locked (which prevents unauthorized fastboot interaction on production devices, though it blocks legitimate developer workflows), maintaining strong physical-access controls and chain-of-custody for high-value devices, and using MDM policies to enforce bootloader-locked state and detect device tampering. Disabling USB data when the device is locked or screen-off further reduces opportunistic access, at the cost of breaking some accessory and tethering use cases.
More in Snapdragon
View allMemory corruption in Qualcomm Snapdragon Wi-Fi/NAN firmware allows an attacker within wireless range to overflow a stack
Buffer overflow in Qualcomm Snapdragon firmware enables authentication bypass on adjacent networks, allowing remote unau
Local privilege escalation and memory corruption in Qualcomm Snapdragon WLAN firmware occurs when the driver parses malf
Memory corruption in Qualcomm Snapdragon Strongbox component allows local low-privileged attackers to trigger a buffer o
Local privilege escalation in Qualcomm Snapdragon chipsets stems from an out-of-bounds memory access in the Strongbox tr
Memory corruption in Qualcomm Snapdragon chipsets allows adjacent network attackers to achieve arbitrary code execution
Bootloader integrity bypass in Qualcomm Snapdragon platforms allows a high-privileged local attacker to write to a speci
Authentication bypass in Qualcomm Snapdragon SoCs allows adjacent network attackers to exploit a cryptographic flaw duri
Memory corruption in Qualcomm Snapdragon IOCTL device driver handling enables a local low-privilege attacker to achieve
Memory corruption in Qualcomm Snapdragon's fingerprint Trusted Application (TA) allows a local low-privileged attacker t
Memory corruption in Qualcomm Snapdragon platforms occurs when a packet with a size value near the maximum allowable lim
Local privilege escalation via memory corruption affects Qualcomm Snapdragon platforms, where allocating memory with siz
Same technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today