Skip to main content

Qualcomm Snapdragon EUVDEUVD-2026-52736

| CVE-2026-25288 HIGH
Buffer Over-read (CWE-126)
2026-08-04 qualcomm GHSA-6pfg-325p-mjxq
7.4
CVSS 3.1 · Vendor: qualcomm
Share

Severity by source

Vendor (qualcomm) PRIMARY
7.4 HIGH
AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
vuln.today AI
7.4 HIGH

Adjacent unauthenticated attacker sends a malformed Wi-Fi frame requiring no interaction; scope change reflects crash propagation from Wi-Fi driver to host OS; no confidentiality or integrity impact.

3.1 AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
4.0 AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H

Primary rating from Vendor (qualcomm).

CVSS VectorVendor: qualcomm

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Changed
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

2
Analysis Generated
Aug 04, 2026 - 16:08 vuln.today
CVE Published
Aug 04, 2026 - 15:07 cve.org
HIGH 7.4

DescriptionCVE.org

Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size.

AnalysisAI

Transient denial of service in Qualcomm Snapdragon's Wi-Fi 6 stack allows adjacent, unauthenticated attackers to crash affected devices by transmitting a malformed Target Wake Time (TWT) channel usage response frame with an undersized packet payload. The CVSS scope change (S:C) indicates the crash propagates beyond the Wi-Fi subsystem to impact the broader host environment. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Attain Wi-Fi radio proximity to target device
Delivery
Craft TWT channel usage response frame with undersized packet
Exploit
Transmit malformed frame to Snapdragon Wi-Fi stack
Execution
Trigger buffer over-read in TWT frame parser
Impact
Cause transient host system denial of service

Vulnerability AssessmentAI

Exploitation The target device must be equipped with a Qualcomm Snapdragon chipset that implements Wi-Fi 6 (802.11ax) TWT frame processing, and the Wi-Fi interface must be active and capable of receiving TWT management frames. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 7.4 (High) score reflects adjacent network attack vector (AV:A), low complexity (AC:L), no required privileges (PR:N), no user interaction (UI:N), and a scope change (S:C) with high availability impact (A:H). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker within Wi-Fi radio range of a Snapdragon-equipped device - such as a smartphone, tablet, or Wi-Fi 6 IoT sensor - crafts a TWT channel usage response frame with a payload shorter than the minimum size the Snapdragon parser expects. Transmitting this frame causes the Wi-Fi stack to perform a buffer over-read, triggering a transient system crash or reset. …
Remediation Apply firmware and driver updates published by Qualcomm in the August 2026 Security Bulletin (https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-bulletin.html); specific patched firmware or driver version numbers were not present in the available data and must be obtained directly from the bulletin or via OEM-distributed security updates. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours, audit your device inventory to identify all Snapdragon-based smartphones, tablets, and IoT devices and categorize by business criticality and network exposure. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

CVE-2026-25289 CRITICAL
9.6 Aug 04

Memory corruption in Qualcomm Snapdragon Wi-Fi/NAN firmware allows an attacker within wireless range to overflow a stack

CVE-2026-25293 CRITICAL
9.6 May 04

Buffer overflow in Qualcomm Snapdragon firmware enables authentication bypass on adjacent networks, allowing remote unau

CVE-2026-25268 HIGH
8.8 Jul 06

Local privilege escalation and memory corruption in Qualcomm Snapdragon WLAN firmware occurs when the driver parses malf

CVE-2026-25277 HIGH
8.8 Jun 01

Memory corruption in Qualcomm Snapdragon Strongbox component allows local low-privileged attackers to trigger a buffer o

CVE-2026-25276 HIGH
8.8 Jun 01

Local privilege escalation in Qualcomm Snapdragon chipsets stems from an out-of-bounds memory access in the Strongbox tr

CVE-2025-47392 HIGH
8.8 Apr 06

Memory corruption in Qualcomm Snapdragon chipsets allows adjacent network attackers to achieve arbitrary code execution

CVE-2026-24088 HIGH
8.2 Jun 01

Bootloader integrity bypass in Qualcomm Snapdragon platforms allows a high-privileged local attacker to write to a speci

CVE-2026-24079 HIGH
8.1 Aug 04

Authentication bypass in Qualcomm Snapdragon SoCs allows adjacent network attackers to exploit a cryptographic flaw duri

CVE-2026-24083 HIGH
7.8 Aug 04

Memory corruption in Qualcomm Snapdragon IOCTL device driver handling enables a local low-privilege attacker to achieve

CVE-2026-24080 HIGH
7.8 Aug 04

Memory corruption in Qualcomm Snapdragon's fingerprint Trusted Application (TA) allows a local low-privileged attacker t

CVE-2026-21366 HIGH
7.8 Aug 04

Memory corruption in Qualcomm Snapdragon platforms occurs when a packet with a size value near the maximum allowable lim

CVE-2026-21379 HIGH
7.8 Jul 06

Local privilege escalation via memory corruption affects Qualcomm Snapdragon platforms, where allocating memory with siz

Share

EUVD-2026-52736 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy