EUVD-2026-81326
GHSA-2mj3-25xq-r4px
Severity by source
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Local low-priv attacker (AV:L/PR:L); AC:H because a TOCTOU race window must be won, not the vendor's AC:L; full memory-corruption impact gives C/I/A:H.
Primary rating from Vendor (qualcomm).
CVSS VectorNVD
Lifecycle Timeline
4DescriptionNVD
Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying.
AnalysisAI
Memory corruption in Qualcomm Snapdragon I2C transfer request handling can allow a local low-privileged attacker to corrupt memory and potentially achieve privilege escalation or impact confidentiality, integrity, and availability by winning a race condition between memory allocation and data copying. The assessed risk is local-only and high-complexity because exploitation requires code execution on the device and repeated concurrent requests to hit the timing window, and no public exploit identified at time of analysis. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
No credit card · 7-day full trial
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires local low-privileged code execution on a Qualcomm Snapdragon device and the ability to submit I2C transfer requests to the affected handler (PR:L, AV:L, no user interaction). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuine but not urgent-in-the-wild finding. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the Qualcomm September 2026 security bulletin fixes once available from the chipset vendor and OEM; the provided data does not specify an exact patched version, so treat the bulletin as the primary source and deploy OEM firmware updates for affected Snapdragon devices. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, confirm exposure by inventorying Snapdragon-based handsets, tablets, and embedded endpoints against Qualcomm's September 2026 security bulletin chipset mapping, and designate an owner to track that bulletin for a fixed build; no vendor-released patch is identified at time of analysis, so treat the fleet as unpatched in the interim. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Snapdragon
View allRemote code execution in Qualcomm Snapdragon-based products allows unauthenticated network attackers to bypass authoriza
Memory corruption in Qualcomm Snapdragon Wi-Fi/NAN firmware allows an attacker within wireless range to overflow a stack
Buffer overflow in Qualcomm Snapdragon firmware enables authentication bypass on adjacent networks, allowing remote unau
Local privilege escalation in Qualcomm Snapdragon platforms allows a low-privilege on-device process or app to cross a t
Privilege escalation in Qualcomm Snapdragon devices allows a local low-privilege attacker to cross security boundaries a
Local privilege escalation and memory corruption in Qualcomm Snapdragon WLAN firmware occurs when the driver parses malf
Stack-based memory corruption in Qualcomm Snapdragon firmware allows a locally-resident, low-privileged process to overf
Memory corruption in Qualcomm Snapdragon Strongbox component allows local low-privileged attackers to trigger a buffer o
Local privilege escalation in Qualcomm Snapdragon chipsets stems from an out-of-bounds memory access in the Strongbox tr
Memory corruption in Qualcomm Snapdragon chipsets allows adjacent network attackers to achieve arbitrary code execution
Bootloader integrity bypass in Qualcomm Snapdragon platforms allows a high-privileged local attacker to write to a speci
Authentication bypass in Qualcomm Snapdragon SoCs allows adjacent network attackers to exploit a cryptographic flaw duri
Same technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today