EUVD-2026-33845
GHSA-frc8-35g4-52pf
Severity by source
AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Primary rating from Vendor (qualcomm) · only source for this CVE.
CVSS VectorVendor: qualcomm
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionCVE.org
Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.
AnalysisAI
Bootloader integrity bypass in Qualcomm Snapdragon platforms allows a high-privileged local attacker to write to a specific partition and load a customized (unsigned or tampered) bootloader, breaking the device's chain of trust. The flaw, reported by Qualcomm itself in its June 2026 security bulletin, carries a CVSS of 8.2 with scope change due to its impact on trusted firmware boundaries, and at the time of analysis there is no public exploit identified and the issue is not listed in CISA KEV.
Technical ContextAI
The underlying issue is a cryptographic weakness in how Snapdragon firmware validates or authenticates a particular boot partition before allowing write operations. CWE-306 (Missing Authentication for Critical Function) indicates that the partition-write/load path does not sufficiently verify the caller's authority or the cryptographic signature of the payload, which lets a privileged actor substitute a customized bootloader image. Affected products per the supplied CPE are Qualcomm Snapdragon application processors (cpe:2.3:a:qualcomm,_inc.:snapdragon:*), a System-on-Chip family broadly deployed in Android handsets, automotive platforms, IoT, and compute devices, meaning the bootloader is the root of trust for the entire device boot chain - once it is replaced, every higher-layer integrity check (verified boot, TEE attestation, OEM lock state) can be undermined.
RemediationAI
Apply the fix published in Qualcomm's June 2026 Security Bulletin (https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bulletin.html) once the corresponding OEM firmware/bootloader update is released for your device model - patch available per vendor advisory, with exact patched build numbers determined by each OEM rather than a single upstream version string. Until the OEM update is installed, compensating controls include enforcing OEM-locked bootloader state and rejecting devices with unlock flags via MDM/attestation policy, requiring Play Integrity or platform remote-attestation checks before granting access to sensitive workloads (trade-off: breaks legitimately rooted developer devices), restricting physical access to high-value devices to defeat the AV:L precondition, and revoking trust for affected device models in attestation-gated services until firmware is updated (trade-off: user lockout). Do not rely on disabling features at the OS layer alone, since the flaw lives below the OS in the boot chain.
More in Snapdragon
View allMemory corruption in Qualcomm Snapdragon Wi-Fi/NAN firmware allows an attacker within wireless range to overflow a stack
Buffer overflow in Qualcomm Snapdragon firmware enables authentication bypass on adjacent networks, allowing remote unau
Local privilege escalation and memory corruption in Qualcomm Snapdragon WLAN firmware occurs when the driver parses malf
Memory corruption in Qualcomm Snapdragon Strongbox component allows local low-privileged attackers to trigger a buffer o
Local privilege escalation in Qualcomm Snapdragon chipsets stems from an out-of-bounds memory access in the Strongbox tr
Memory corruption in Qualcomm Snapdragon chipsets allows adjacent network attackers to achieve arbitrary code execution
Authentication bypass in Qualcomm Snapdragon SoCs allows adjacent network attackers to exploit a cryptographic flaw duri
Memory corruption in Qualcomm Snapdragon IOCTL device driver handling enables a local low-privilege attacker to achieve
Memory corruption in Qualcomm Snapdragon's fingerprint Trusted Application (TA) allows a local low-privileged attacker t
Memory corruption in Qualcomm Snapdragon platforms occurs when a packet with a size value near the maximum allowable lim
Local privilege escalation via memory corruption affects Qualcomm Snapdragon platforms, where allocating memory with siz
Use-after-free memory corruption in Qualcomm Snapdragon platform driver code allows a local low-privileged process to tr
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today