# CVE-2026-25258: Qualcomm Snapdragon memory corruption in IOCTL escape operations

Source: https://junglewise.ai/threats/cve-2026-25258-qualcomm-snapdragon-memory-corruption-in-ioctl-escape-operations  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-01. Updated: 2026-06-01  
License: CC BY 4.0 with a link back

CVE-2026-25258 · Severity: high · CVSS 7.8 · Published 2026-06-01

A security vulnerability exists in Qualcomm chipsets used in many mobile devices. This flaw occurs when the system processes specific hardware communication requests, potentially allowing a malicious application installed on the device to gain unauthorized access to sensitive data or cause system crashes. This could lead to a total compromise of the device's security and stability.

Technologies: [Qualcomm Snapdragon Mobile](https://junglewise.ai/threats/technologies/snapdragon-mobile). Vendors: [Qualcomm](https://junglewise.ai/threats/vendors/qualcomm).

## Quick answers

**Is CVE-2026-25258 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-25258 being exploited in the wild.

**How severe is CVE-2026-25258?** High severity, with a CVSS score of 7.8, published 1 June 2026.

**Which products and versions are affected?** Qualcomm Snapdragon Mobile.

**Is there a fix for CVE-2026-25258?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-25258 attacked?** It is attacked with local access, in device firmware.

**Am I affected by CVE-2026-25258?** Check whether you run Qualcomm Snapdragon Mobile. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A memory corruption vulnerability exists in Qualcomm firmware/drivers due to improper handling of IOCTL (Input/Output Control) calls during escape operations. The vulnerability is classified as an out-of-bounds read (CWE-125), though the reported impact includes high confidentiality, integrity, and availability loss, suggesting it may lead to broader memory corruption or privilege escalation. An attacker with local access and low privileges can exploit this flaw to read sensitive memory or crash the system. The issue was disclosed in the June 2026 Qualcomm Security Bulletin.

## Affected products

- Qualcomm Snapdragon Mobile

## Timeline

- 2026-06-01: disclosed
- 2026-06-01: advisory: Qualcomm June 2026 Security Bulletin published

## References

- [https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bulletin.html](https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bulletin.html)

## Related threats

- [Qualcomm Snapdragon memory corruption in HT40 channel switching](https://junglewise.ai/threats/cve-2026-25268-qualcomm-snapdragon-memory-corruption-in-ht40-channel-switching)
- [Qualcomm Snapdragon memory corruption via TOCTOU in shared buffers](https://junglewise.ai/threats/cve-2026-25260-qualcomm-snapdragon-memory-corruption-via-toctou-in-shared)
- [Qualcomm Chipset memory corruption in IOCTL escape operations](https://junglewise.ai/threats/cve-2026-25259-qualcomm-chipset-memory-corruption-in-ioctl-escape-operations)
- [Qualcomm Snapdragon memory corruption in fastboot display mode command](https://junglewise.ai/threats/cve-2026-24092-qualcomm-snapdragon-memory-corruption-in-fastboot-display-mode)
- [Qualcomm Snapdragon memory corruption in fastboot commands](https://junglewise.ai/threats/cve-2026-24091-qualcomm-snapdragon-memory-corruption-in-fastboot-commands)