EUVD-2026-84346
GHSA-3rc4-4v6f-jmj2
Severity by source
AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary Bootloader parsing needs physical device access (AV:P) and precise conditions (AC:H); low privilege and interaction apply, and compromise crosses into the secure world (S:C) with full C/I/A impact.
Primary rating from Vendor (qualcomm).
CVSS VectorNVD
Lifecycle Timeline
3DescriptionNVD
Memory corruption while processing a crafted ELF file in the Primary Bootloader.
AnalysisAI
Memory corruption in the Primary Bootloader (PBL) of Qualcomm Snapdragon chipsets lets an attacker who has physical possession of a device feed a crafted ELF file during the early boot sequence and corrupt bootloader memory, with the scope change indicating a possible escape from the normal boot context into the secure/TrustZone world. Exploitation is highly constrained: CVSS 3.1 scores it 6.9 under a vector of AV:P/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H, meaning physical access, low-level privileges, high attack complexity (specific timing or hardware state) and user interaction are all required; the practical exposure is limited to lost or stolen devices, supply-chain interdiction, or forensic scenarios rather than remote or default network-reachable attacks. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
No credit card · 7-day full trial
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires physical access to a Snapdragon-based device (AV:P) plus the ability to present a crafted ELF file to the Primary Bootloader during the early boot sequence. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuinely high-impact but hard-to-reach vulnerability whose real-world priority is bounded by its attack prerequisites. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Qualcomm has published an advisory covering this defect in its May 2026 security bulletin (https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2026-bulletin.html), designated as patch-available-per-vendor-advisory; because the Primary Bootloader is a chipset-level component, the fix reaches end users only through OEM firmware updates, so the primary action is to apply the latest OEM firmware/system update for every Snapdragon-based device and to track the OEM bulletin that corresponds to the Qualcomm reference - exact patched version strings are not specified in the available input data and should be taken from the OEM release notes rather than assumed. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Snapdragon
View allRemote code execution in Qualcomm Snapdragon-based products allows unauthenticated network attackers to bypass authoriza
Memory corruption in Qualcomm Snapdragon Wi-Fi/NAN firmware allows an attacker within wireless range to overflow a stack
Buffer overflow in Qualcomm Snapdragon firmware enables authentication bypass on adjacent networks, allowing remote unau
Local privilege escalation in Qualcomm Snapdragon platforms allows a low-privilege on-device process or app to cross a t
Privilege escalation in Qualcomm Snapdragon devices allows a local low-privilege attacker to cross security boundaries a
Local privilege escalation and memory corruption in Qualcomm Snapdragon WLAN firmware occurs when the driver parses malf
Stack-based memory corruption in Qualcomm Snapdragon firmware allows a locally-resident, low-privileged process to overf
Memory corruption in Qualcomm Snapdragon Strongbox component allows local low-privileged attackers to trigger a buffer o
Local privilege escalation in Qualcomm Snapdragon chipsets stems from an out-of-bounds memory access in the Strongbox tr
Memory corruption in Qualcomm Snapdragon chipsets allows adjacent network attackers to achieve arbitrary code execution
Bootloader integrity bypass in Qualcomm Snapdragon platforms allows a high-privileged local attacker to write to a speci
Authentication bypass in Qualcomm Snapdragon SoCs allows adjacent network attackers to exploit a cryptographic flaw duri
Same weakness CWE-123 – Write-what-where Condition
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today