The flaw is a memory corruption bug triggered while the kernel processes fastboot OEM commands. This vulnerability can allow an attacker to corrupt kernel memory, potentially leading to arbitrary code execution or privilege escalation. The weakness is reflected by CWE‑1286, indicating an improper validation of input syntax that results in a memory safety violation.

Qualcomm, Inc. devices running Snapdragon processors are impacted, as the kernel component handling fastboot OEM commands is common across these platforms. No specific product or version numbers are supplied, so all Snapdragon systems that use the affected fastboot implementation are considered vulnerable until vendor information is provided.

The CVSS score of 7.2 indicates a high severity. Because the EPSS score is not available, the likelihood of exploitation in the wild cannot be quantified, and the vulnerability is not currently listed in the CISA KEV catalog. The attack vector is inferred to be local or physical access, as fastboot OEM commands are typically issued by device developers or during manufacturing. An attacker with such access could trigger the memory corruption to gain kernel privileges.