EUVD-2026-33847
GHSA-q684-mwhh-phmm
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Primary rating from Vendor (qualcomm) · only source for this CVE.
CVSS VectorVendor: qualcomm
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Lifecycle Timeline
1DescriptionCVE.org
Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow.
AnalysisAI
Boot flow tampering in Qualcomm Snapdragon platforms allows a local authenticated attacker to bypass cryptographic verification of partition table entries and modify the device's boot process, achieving high impact to confidentiality and integrity. Qualcomm disclosed the issue in its June 2026 security bulletin, classifying it as an authentication bypass affecting Snapdragon products. No public exploit identified at time of analysis and the issue is not listed in CISA KEV, but the boot-chain location of the flaw makes it strategically valuable for persistent compromise.
Technical ContextAI
Qualcomm Snapdragon System-on-Chip platforms rely on a chain-of-trust boot architecture where each stage cryptographically validates the next, including the partition table that describes how flash storage is laid out (boot, system, modem, recovery, etc.). The CWE-306 (Missing Authentication for Critical Function) classification combined with the description indicates that the cryptographic check applied to partition table entries is insufficient or incorrectly enforced, so an attacker who can write or influence those entries can redirect the boot loader to attacker-controlled code. Because partition tables are consulted very early in the boot sequence - before the OS or any runtime security mitigations are active - a flaw here undermines verified boot, dm-verity, and any downstream attestation that assumes the boot chain is trustworthy.
RemediationAI
Patch available per vendor advisory: apply the firmware/boot-chain updates referenced in the Qualcomm June 2026 Security Bulletin (https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bulletin.html) once they are integrated by your device OEM, since Qualcomm fixes are typically delivered downstream through Android monthly security patches or OEM firmware images. While awaiting OEM rollout, compensating controls include restricting local administrative and fastboot/EDL access (require unlock confirmation, disable USB debugging by default), enforcing full-disk encryption tied to verified-boot state so post-compromise device states are detectable, and using remote attestation (Android Key Attestation or equivalent) to refuse access to sensitive services from devices whose boot state cannot be verified - with the trade-off that attestation can break legitimate users on custom ROMs and may require backend changes to enforce.
More in Snapdragon
View allMemory corruption in Qualcomm Snapdragon Wi-Fi/NAN firmware allows an attacker within wireless range to overflow a stack
Buffer overflow in Qualcomm Snapdragon firmware enables authentication bypass on adjacent networks, allowing remote unau
Local privilege escalation and memory corruption in Qualcomm Snapdragon WLAN firmware occurs when the driver parses malf
Memory corruption in Qualcomm Snapdragon Strongbox component allows local low-privileged attackers to trigger a buffer o
Local privilege escalation in Qualcomm Snapdragon chipsets stems from an out-of-bounds memory access in the Strongbox tr
Memory corruption in Qualcomm Snapdragon chipsets allows adjacent network attackers to achieve arbitrary code execution
Bootloader integrity bypass in Qualcomm Snapdragon platforms allows a high-privileged local attacker to write to a speci
Authentication bypass in Qualcomm Snapdragon SoCs allows adjacent network attackers to exploit a cryptographic flaw duri
Memory corruption in Qualcomm Snapdragon IOCTL device driver handling enables a local low-privilege attacker to achieve
Memory corruption in Qualcomm Snapdragon's fingerprint Trusted Application (TA) allows a local low-privileged attacker t
Memory corruption in Qualcomm Snapdragon platforms occurs when a packet with a size value near the maximum allowable lim
Local privilege escalation via memory corruption affects Qualcomm Snapdragon platforms, where allocating memory with siz
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today