EUVD-2026-33845
GHSA-frc8-35g4-52pf
Severity by source
AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionCVE.org
Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.
AnalysisAI
Bootloader integrity bypass in Qualcomm Snapdragon platforms allows a high-privileged local attacker to write to a specific partition and load a customized (unsigned or tampered) bootloader, breaking the device's chain of trust. The flaw, reported by Qualcomm itself in its June 2026 security bulletin, carries a CVSS of 8.2 with scope change due to its impact on trusted firmware boundaries, and at the time of analysis there is no public exploit identified and the issue is not listed in CISA KEV.
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires local code execution at high privilege (PR:H) on a Qualcomm Snapdragon-based device - practically, the attacker must already hold root, a privileged system/vendor service context, or a fastboot/diagnostic shell on the target - and the device must reach the vulnerable processing path for the specific partition referenced in the advisory. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS vector AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H tells a specific story: exploitation requires local access with high privileges, no user interaction, but causes a scope change with high impact on confidentiality, integrity, and availability - consistent with a privileged-OS-to-firmware boundary break. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker who has already obtained high-privilege local access on a Snapdragon device - for example via a chained Android root exploit, a malicious OEM service binary, or brief physical access to an unlocked engineering device - invokes the vulnerable partition-write path to overwrite the targeted partition with a customized bootloader image. On the next reboot the tampered bootloader executes before verified boot can intervene, giving the attacker persistent, OS-reinstall-surviving control of the device and the ability to subvert TEE-backed attestation. … |
| Remediation | Apply the fix published in Qualcomm's June 2026 Security Bulletin (https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bulletin.html) once the corresponding OEM firmware/bootloader update is released for your device model - patch available per vendor advisory, with exact patched build numbers determined by each OEM rather than a single upstream version string. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
24 hours: Audit and inventory all Qualcomm Snapdragon devices deployed across your organization, including firmware versions and deployment contexts. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Snapdragon
View allBuffer overflow in Qualcomm Snapdragon firmware enables authentication bypass on adjacent networks, allowing remote unau
Memory corruption in Qualcomm Snapdragon Strongbox component allows local low-privileged attackers to trigger a buffer o
Local privilege escalation in Qualcomm Snapdragon chipsets stems from an out-of-bounds memory access in the Strongbox tr
Memory corruption in Qualcomm Snapdragon chipsets allows adjacent network attackers to achieve arbitrary code execution
Local privilege escalation in Qualcomm Snapdragon platforms is possible through memory corruption when processing multip
Local privilege escalation in Qualcomm Snapdragon platforms stems from an out-of-bounds read (CWE-125) triggered during
Local privilege escalation and memory corruption in Qualcomm Snapdragon platforms allows an attacker with low-privileged
Local privilege escalation via memory corruption in Qualcomm Snapdragon platform components allows an authenticated low-
Local memory corruption in Qualcomm Snapdragon platforms (CVE-2025-59604) allows a low-privileged local attacker to trig
Use-after-free vulnerability in Qualcomm Snapdragon chipsets enables local privilege escalation to achieve full device c
Memory corruption in Qualcomm Snapdragon allows local authenticated attackers with low privileges to achieve arbitrary c
Memory corruption in Qualcomm Snapdragon camera subsystem allows local authenticated users to execute arbitrary code wit
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today