EUVD-2026-33847
GHSA-q684-mwhh-phmm
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Lifecycle Timeline
1DescriptionCVE.org
Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow.
AnalysisAI
Boot flow tampering in Qualcomm Snapdragon platforms allows a local authenticated attacker to bypass cryptographic verification of partition table entries and modify the device's boot process, achieving high impact to confidentiality and integrity. Qualcomm disclosed the issue in its June 2026 security bulletin, classifying it as an authentication bypass affecting Snapdragon products. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires local access to a Snapdragon-based device with low-privilege code execution or equivalent ability to write partition table entries (e.g., shell-level access, fastboot/EDL service mode, or a chained userland vulnerability), per the AV:L/PR:L CVSS metrics. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 7.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) shows the issue requires local access and low privileges but no user interaction, with high impact to confidentiality and integrity and no availability impact - consistent with persistent boot-chain compromise rather than service disruption. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | A local attacker with low-privilege code execution on a Snapdragon device - for example via a chained userland exploit, a malicious app with shell access, or physical access in service/recovery mode - writes a crafted partition table entry that bypasses the cryptographic check and points the next boot stage at attacker-controlled code. On reboot, the device loads the tampered image as part of the trusted boot chain, giving the attacker persistent pre-OS execution that survives factory reset and defeats verified-boot guarantees. … |
| Remediation | Patch available per vendor advisory: apply the firmware/boot-chain updates referenced in the Qualcomm June 2026 Security Bulletin (https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bulletin.html) once they are integrated by your device OEM, since Qualcomm fixes are typically delivered downstream through Android monthly security patches or OEM firmware images. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
24 hours: Inventory Snapdragon deployments and flag those in security-critical roles (authentication systems, payment processing, network appliances). …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Snapdragon
View allBuffer overflow in Qualcomm Snapdragon firmware enables authentication bypass on adjacent networks, allowing remote unau
Memory corruption in Qualcomm Snapdragon Strongbox component allows local low-privileged attackers to trigger a buffer o
Local privilege escalation in Qualcomm Snapdragon chipsets stems from an out-of-bounds memory access in the Strongbox tr
Memory corruption in Qualcomm Snapdragon chipsets allows adjacent network attackers to achieve arbitrary code execution
Bootloader integrity bypass in Qualcomm Snapdragon platforms allows a high-privileged local attacker to write to a speci
Local privilege escalation in Qualcomm Snapdragon platforms is possible through memory corruption when processing multip
Local privilege escalation in Qualcomm Snapdragon platforms stems from an out-of-bounds read (CWE-125) triggered during
Local privilege escalation and memory corruption in Qualcomm Snapdragon platforms allows an attacker with low-privileged
Local privilege escalation via memory corruption in Qualcomm Snapdragon platform components allows an authenticated low-
Local memory corruption in Qualcomm Snapdragon platforms (CVE-2025-59604) allows a low-privileged local attacker to trig
Use-after-free vulnerability in Qualcomm Snapdragon chipsets enables local privilege escalation to achieve full device c
Memory corruption in Qualcomm Snapdragon allows local authenticated attackers with low privileges to achieve arbitrary c
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today