Snapdragon
Monthly
Local memory corruption in Qualcomm Snapdragon platforms (CVE-2025-59604) allows a low-privileged local attacker to trigger invalid memory writes via a null pointer condition during a memory copy operation, resulting in high confidentiality, integrity, and availability impact (CVSS 7.8). The flaw is disclosed in the Qualcomm June 2026 security bulletin with no public exploit identified at time of analysis and no CISA KEV listing. While CWE-476 (null pointer dereference) typically yields denial of service, the vendor's CIA:H scoring indicates the invalid writes may be steerable into broader corruption beyond a simple crash.
Sensitive device configuration is exposed to adjacent network attackers during factory reset operations conducted through the powerline interface on Qualcomm Snapdragon chipsets. An unauthenticated attacker present on the same powerline network segment can intercept unprotected configuration data at the moment of reset, gaining unauthorized access to potentially sensitive device parameters such as credentials or network settings. No public exploit has been identified at time of analysis, and Qualcomm addressed this vulnerability in its June 2026 Security Bulletin.
Memory corruption in Qualcomm Snapdragon SDK occurs when processing IOCTL commands while the device is in power-save state, allowing local authenticated attackers to trigger a denial of service. The vulnerability affects all versions of Snapdragon and requires local access with user-level privileges; no authentication bypass or privilege escalation is possible, but successful exploitation causes system crash or hang. EPSS and KEV status not provided; no public exploit code has been identified at time of analysis.
Memory corruption in Qualcomm Snapdragon allows local authenticated attackers with low privileges to achieve arbitrary code execution and full system compromise. The vulnerability triggers when malicious drivers invoke specific IOCTLs with intentionally malformed input/output buffers, bypassing buffer validation checks. EPSS and KEV status not available at time of analysis; advisory references May 2026 bulletin suggesting pre-disclosure analysis.
Memory corruption in the digital signal processor (DSP) process-creation path on Qualcomm Snapdragon chipsets can be triggered only by a local low-privileged attacker who forces a kernel-level allocation failure and then wins a timing-dependent race condition (CWE-367). This is a local, high-complexity issue (CVSS 7.0, AV:L/AC:H/PR:L/UI:N) affecting many Snapdragon SoCs and platforms, and it can yield high confidentiality, integrity, and availability impact on the target device if the race succeeds. No public exploit was identified at time of analysis, EPSS is 0.01 percent (3rd percentile), and CISA SSVC reports exploitation: none and not automatable; real-world priority is low despite the HIGH base score.
Information disclosure in Qualcomm Snapdragon firmware allows local authenticated attackers to read sensitive kernel memory via malformed IOCTL handler callbacks that bypass buffer size validation. The vulnerability affects multiple Snapdragon chipset versions and requires local access with limited privileges; exploitation results in confidentiality breach without direct system compromise. No active exploitation has been confirmed at the time of analysis.
Memory corruption in Qualcomm Snapdragon camera subsystem allows local authenticated users to execute arbitrary code with high privileges through crafted input/output control (ioctl) calls targeting camera sensor interfaces with malformed output buffers. CVSS score of 7.8 reflects local attack vector requiring low-privilege account access. No EPSS data or KEV listing at time of analysis, suggesting exploitation has not been publicly observed. Qualcomm security bulletin scheduled for May 2026 indicates vendor-coordinated disclosure with patches expected in that timeframe.
Memory corruption in Qualcomm Snapdragon chipsets can be triggered by a local attacker with low privileges, potentially leading to arbitrary code execution within the context of the affected component. The flaw occurs when the size of a previously allocated buffer is dynamically changed while its contents are concurrently being modified, a condition that requires the attacker to reach a specific code path. No public exploit code or active exploitation has been identified, and the EPSS score is very low (0.01%), indicating minimal immediate risk; the SSVC assessment marks it as non-automatable, limiting scalable attacks.
A malformed 802.11r Fast Transition (FT) response frame with an invalid header structure can cause a transient denial of service in the WLAN firmware of a very broad range of Qualcomm Snapdragon chipsets, including Snapdragon Mobile Platforms, FastConnect connectivity combos, QCA/QCN WLAN parts, Networking Pro and Immersive Home platforms, and several 5G Modem-RF systems. The victim device must be actively performing Fast BSS Transition wireless roaming, and the attacker must be within WiFi radio range - typically by operating or impersonating an access point - so exploitation requires local radio proximity rather than internet-reachable access, and the resulting impact is a self-recovering outage with no confidentiality or integrity effect. There is no public exploit identified at time of analysis, CISA KEV does not list this CVE, and the EPSS score is negligible (0.02%, 3rd percentile), with CISA's SSVC framework rating exploitation as "none" and automatable as "no"; the vendor assigns 7.5 (HIGH) while our independent assessment lowers the effective vector to AV:A because of the radio-proximity requirement.
Transient denial-of-service in Qualcomm Snapdragon WiFi firmware allows an attacker within WiFi radio range to crash the wireless subsystem by supplying a crafted target power rate table during channel configuration. No authentication or user interaction is required, but the effect is self-recovering and limited to a temporary loss of wireless connectivity on affected devices. No public exploit code has been identified, and the EPSS score is 0.02% (3rd percentile), indicating a very low likelihood of exploitation; this low real-world risk contrasts with the vendor's 7.5 (HIGH) CVSS score.
Buffer overread in Qualcomm Snapdragon cryptographic implementation allows authenticated local attackers to expose sensitive memory contents and potentially manipulate cryptographic operations. The vulnerability (CWE-126) stems from copying data to a destination buffer without size validation, creating high confidentiality and integrity risk. EPSS scoring and KEV status not available at time of analysis; no public exploit identified. Affects Qualcomm Snapdragon chipsets with fix documented in April 2026 security bulletin.
Memory corruption in Qualcomm Snapdragon chipsets allows adjacent network attackers to achieve arbitrary code execution without authentication when processing malformed satellite data files containing invalid signature offsets. The vulnerability stems from an integer overflow (CWE-190) that leads to buffer overflow conditions during satellite data decoding. With a CVSS score of 8.8 and adjacent network attack vector, this represents a significant risk for devices with satellite communication capabilities in proximity-based attack scenarios. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
Local privilege escalation in Qualcomm Snapdragon allows authenticated users to execute arbitrary code through memory corruption when processing frame requests. This CWE-121 stack-based buffer overflow enables complete system compromise (high confidentiality, integrity, and availability impact). No public exploit identified at time of analysis, with CVSS 7.8 indicating high severity requiring low attack complexity and low privileges. Qualcomm's April 2026 security bulletin addresses this vulnerability.
Local privilege escalation via memory corruption in Qualcomm Snapdragon JPEG driver allows authenticated local users to achieve full system compromise (high confidentiality, integrity, and availability impact). The buffer overflow vulnerability (CWE-126) occurs during IOCTL request preprocessing, a common attack surface in kernel-mode device drivers. CVSS 7.8 indicates high severity with low attack complexity. No public exploit identified at time of analysis, and EPSS data not available in provided intelligence. Qualcomm's April 2026 security bulletin addresses this issue, indicating coordinated disclosure timeframe.
Local privilege escalation in Qualcomm Snapdragon components enables authenticated users to achieve arbitrary code execution with elevated privileges through memory corruption triggered by integer overflow during attestation report generation. The vulnerability requires low attack complexity and low-level authentication (CVSS:3.1/AV:L/AC:L/PR:L), allowing complete compromise of confidentiality, integrity, and availability on affected devices. With CVSS 7.8 (High severity) and local attack vector, this represents a significant risk on multi-user Android devices where malicious apps could exploit the flaw to break out of sandboxing. No public exploit identified at time of analysis, though the buffer overflow class (CWE-120) is well-understood by exploit developers.
Memory corruption via use-after-free in Qualcomm Snapdragon SDK occurs when concurrent fence deregistration and signal handling operations access freed memory, allowing authenticated local attackers with low privileges to achieve information disclosure and integrity/availability compromise. CVSS 6.5 reflects local attack vector with high complexity; no public exploit code or active exploitation confirmed at time of analysis.
Local memory corruption in Qualcomm Snapdragon platforms (CVE-2025-59604) allows a low-privileged local attacker to trigger invalid memory writes via a null pointer condition during a memory copy operation, resulting in high confidentiality, integrity, and availability impact (CVSS 7.8). The flaw is disclosed in the Qualcomm June 2026 security bulletin with no public exploit identified at time of analysis and no CISA KEV listing. While CWE-476 (null pointer dereference) typically yields denial of service, the vendor's CIA:H scoring indicates the invalid writes may be steerable into broader corruption beyond a simple crash.
Sensitive device configuration is exposed to adjacent network attackers during factory reset operations conducted through the powerline interface on Qualcomm Snapdragon chipsets. An unauthenticated attacker present on the same powerline network segment can intercept unprotected configuration data at the moment of reset, gaining unauthorized access to potentially sensitive device parameters such as credentials or network settings. No public exploit has been identified at time of analysis, and Qualcomm addressed this vulnerability in its June 2026 Security Bulletin.
Memory corruption in Qualcomm Snapdragon SDK occurs when processing IOCTL commands while the device is in power-save state, allowing local authenticated attackers to trigger a denial of service. The vulnerability affects all versions of Snapdragon and requires local access with user-level privileges; no authentication bypass or privilege escalation is possible, but successful exploitation causes system crash or hang. EPSS and KEV status not provided; no public exploit code has been identified at time of analysis.
Memory corruption in Qualcomm Snapdragon allows local authenticated attackers with low privileges to achieve arbitrary code execution and full system compromise. The vulnerability triggers when malicious drivers invoke specific IOCTLs with intentionally malformed input/output buffers, bypassing buffer validation checks. EPSS and KEV status not available at time of analysis; advisory references May 2026 bulletin suggesting pre-disclosure analysis.
Memory corruption in the digital signal processor (DSP) process-creation path on Qualcomm Snapdragon chipsets can be triggered only by a local low-privileged attacker who forces a kernel-level allocation failure and then wins a timing-dependent race condition (CWE-367). This is a local, high-complexity issue (CVSS 7.0, AV:L/AC:H/PR:L/UI:N) affecting many Snapdragon SoCs and platforms, and it can yield high confidentiality, integrity, and availability impact on the target device if the race succeeds. No public exploit was identified at time of analysis, EPSS is 0.01 percent (3rd percentile), and CISA SSVC reports exploitation: none and not automatable; real-world priority is low despite the HIGH base score.
Information disclosure in Qualcomm Snapdragon firmware allows local authenticated attackers to read sensitive kernel memory via malformed IOCTL handler callbacks that bypass buffer size validation. The vulnerability affects multiple Snapdragon chipset versions and requires local access with limited privileges; exploitation results in confidentiality breach without direct system compromise. No active exploitation has been confirmed at the time of analysis.
Memory corruption in Qualcomm Snapdragon camera subsystem allows local authenticated users to execute arbitrary code with high privileges through crafted input/output control (ioctl) calls targeting camera sensor interfaces with malformed output buffers. CVSS score of 7.8 reflects local attack vector requiring low-privilege account access. No EPSS data or KEV listing at time of analysis, suggesting exploitation has not been publicly observed. Qualcomm security bulletin scheduled for May 2026 indicates vendor-coordinated disclosure with patches expected in that timeframe.
Memory corruption in Qualcomm Snapdragon chipsets can be triggered by a local attacker with low privileges, potentially leading to arbitrary code execution within the context of the affected component. The flaw occurs when the size of a previously allocated buffer is dynamically changed while its contents are concurrently being modified, a condition that requires the attacker to reach a specific code path. No public exploit code or active exploitation has been identified, and the EPSS score is very low (0.01%), indicating minimal immediate risk; the SSVC assessment marks it as non-automatable, limiting scalable attacks.
A malformed 802.11r Fast Transition (FT) response frame with an invalid header structure can cause a transient denial of service in the WLAN firmware of a very broad range of Qualcomm Snapdragon chipsets, including Snapdragon Mobile Platforms, FastConnect connectivity combos, QCA/QCN WLAN parts, Networking Pro and Immersive Home platforms, and several 5G Modem-RF systems. The victim device must be actively performing Fast BSS Transition wireless roaming, and the attacker must be within WiFi radio range - typically by operating or impersonating an access point - so exploitation requires local radio proximity rather than internet-reachable access, and the resulting impact is a self-recovering outage with no confidentiality or integrity effect. There is no public exploit identified at time of analysis, CISA KEV does not list this CVE, and the EPSS score is negligible (0.02%, 3rd percentile), with CISA's SSVC framework rating exploitation as "none" and automatable as "no"; the vendor assigns 7.5 (HIGH) while our independent assessment lowers the effective vector to AV:A because of the radio-proximity requirement.
Transient denial-of-service in Qualcomm Snapdragon WiFi firmware allows an attacker within WiFi radio range to crash the wireless subsystem by supplying a crafted target power rate table during channel configuration. No authentication or user interaction is required, but the effect is self-recovering and limited to a temporary loss of wireless connectivity on affected devices. No public exploit code has been identified, and the EPSS score is 0.02% (3rd percentile), indicating a very low likelihood of exploitation; this low real-world risk contrasts with the vendor's 7.5 (HIGH) CVSS score.
Buffer overread in Qualcomm Snapdragon cryptographic implementation allows authenticated local attackers to expose sensitive memory contents and potentially manipulate cryptographic operations. The vulnerability (CWE-126) stems from copying data to a destination buffer without size validation, creating high confidentiality and integrity risk. EPSS scoring and KEV status not available at time of analysis; no public exploit identified. Affects Qualcomm Snapdragon chipsets with fix documented in April 2026 security bulletin.
Memory corruption in Qualcomm Snapdragon chipsets allows adjacent network attackers to achieve arbitrary code execution without authentication when processing malformed satellite data files containing invalid signature offsets. The vulnerability stems from an integer overflow (CWE-190) that leads to buffer overflow conditions during satellite data decoding. With a CVSS score of 8.8 and adjacent network attack vector, this represents a significant risk for devices with satellite communication capabilities in proximity-based attack scenarios. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
Local privilege escalation in Qualcomm Snapdragon allows authenticated users to execute arbitrary code through memory corruption when processing frame requests. This CWE-121 stack-based buffer overflow enables complete system compromise (high confidentiality, integrity, and availability impact). No public exploit identified at time of analysis, with CVSS 7.8 indicating high severity requiring low attack complexity and low privileges. Qualcomm's April 2026 security bulletin addresses this vulnerability.
Local privilege escalation via memory corruption in Qualcomm Snapdragon JPEG driver allows authenticated local users to achieve full system compromise (high confidentiality, integrity, and availability impact). The buffer overflow vulnerability (CWE-126) occurs during IOCTL request preprocessing, a common attack surface in kernel-mode device drivers. CVSS 7.8 indicates high severity with low attack complexity. No public exploit identified at time of analysis, and EPSS data not available in provided intelligence. Qualcomm's April 2026 security bulletin addresses this issue, indicating coordinated disclosure timeframe.
Local privilege escalation in Qualcomm Snapdragon components enables authenticated users to achieve arbitrary code execution with elevated privileges through memory corruption triggered by integer overflow during attestation report generation. The vulnerability requires low attack complexity and low-level authentication (CVSS:3.1/AV:L/AC:L/PR:L), allowing complete compromise of confidentiality, integrity, and availability on affected devices. With CVSS 7.8 (High severity) and local attack vector, this represents a significant risk on multi-user Android devices where malicious apps could exploit the flaw to break out of sandboxing. No public exploit identified at time of analysis, though the buffer overflow class (CWE-120) is well-understood by exploit developers.
Memory corruption via use-after-free in Qualcomm Snapdragon SDK occurs when concurrent fence deregistration and signal handling operations access freed memory, allowing authenticated local attackers with low privileges to achieve information disclosure and integrity/availability compromise. CVSS 6.5 reflects local attack vector with high complexity; no public exploit code or active exploitation confirmed at time of analysis.