EUVD-2026-52732
GHSA-fqrr-5g6m-c8hx
Severity by source
AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Adjacent vector confirmed by wireless registration protocol context; no privileges or interaction required; high C and I reflect authentication bypass enabling data access and state manipulation; no availability impact per description.
Primary rating from Vendor (qualcomm).
CVSS VectorVendor: qualcomm
Lifecycle Timeline
2DescriptionCVE.org
Cryptographic Issue while processing registration requests with malformed or missing authentication parameters.
AnalysisAI
Authentication bypass in Qualcomm Snapdragon SoCs allows adjacent network attackers to exploit a cryptographic flaw during registration request processing, yielding high confidentiality and integrity compromise without requiring any privileges or user interaction. The flaw, rooted in CWE-306 (Missing Authentication for Critical Function), occurs when registration requests carry malformed or absent authentication parameters, causing the cryptographic subsystem to proceed without validating caller identity. No public exploit has been identified at time of analysis and Qualcomm has not confirmed active exploitation, but the CVSS 8.1 score and zero-privilege adjacent-network profile represent meaningful risk for devices on shared wireless segments.
Technical ContextAI
The affected product is the Qualcomm Snapdragon SoC family (CPE: cpe:2.3:a:qualcomm,_inc.:snapdragon:*:*:*:*:*:*:*:*), which powers a broad range of Android smartphones, IoT endpoints, automotive systems, and connected devices. The root cause is CWE-306 (Missing Authentication for Critical Function): the cryptographic processing path responsible for handling registration requests does not enforce authentication verification when input parameters are malformed or entirely absent, allowing the function to execute without confirming caller identity. The CVSS adjacent-network attack vector (AV:A) indicates the vulnerable registration protocol operates over a local wireless or network segment - consistent with Snapdragon's modem, Wi-Fi, or Bluetooth firmware stacks - rather than the open internet. The high confidentiality and integrity impacts (C:H/I:H) with no availability impact (A:N) suggest the bypass enables unauthorized read and write access to protected data or state, but does not disrupt service operation.
RemediationAI
The primary remediation is to apply the firmware update issued by Qualcomm in the August 2026 Security Bulletin, available at https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-bulletin.html. Device OEMs (smartphone manufacturers, IoT vendors, automotive integrators) typically receive Qualcomm patches and redistribute them as device-specific firmware updates; end-users should apply any available OTA or firmware update from their device vendor that incorporates the August 2026 Qualcomm security fixes. An exact patched firmware version is not independently confirmable from the available data and must be verified against the Qualcomm bulletin and the relevant OEM advisory. As a compensating control pending patching, restricting devices to trusted wireless networks and avoiding shared or public Wi-Fi segments reduces adjacency-based exposure, since the AV:A vector requires local network segment access. Disabling non-essential wireless interfaces (e.g., Wi-Fi, Bluetooth) when not in use also reduces the attack surface, though this carries operational trade-offs for device usability.
More in Snapdragon
View allRemote code execution in Qualcomm Snapdragon-based products allows unauthenticated network attackers to bypass authoriza
Memory corruption in Qualcomm Snapdragon Wi-Fi/NAN firmware allows an attacker within wireless range to overflow a stack
Buffer overflow in Qualcomm Snapdragon firmware enables authentication bypass on adjacent networks, allowing remote unau
Local privilege escalation in Qualcomm Snapdragon platforms allows a low-privilege on-device process or app to cross a t
Privilege escalation in Qualcomm Snapdragon devices allows a local low-privilege attacker to cross security boundaries a
Local privilege escalation and memory corruption in Qualcomm Snapdragon WLAN firmware occurs when the driver parses malf
Stack-based memory corruption in Qualcomm Snapdragon firmware allows a locally-resident, low-privileged process to overf
Memory corruption in Qualcomm Snapdragon Strongbox component allows local low-privileged attackers to trigger a buffer o
Local privilege escalation in Qualcomm Snapdragon chipsets stems from an out-of-bounds memory access in the Strongbox tr
Memory corruption in Qualcomm Snapdragon chipsets allows adjacent network attackers to achieve arbitrary code execution
Bootloader integrity bypass in Qualcomm Snapdragon platforms allows a high-privileged local attacker to write to a speci
Out-of-bounds memory access in Qualcomm Snapdragon platform firmware allows a locally authenticated low-privileged attac
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today