The flaw is a memory corruption vulnerability triggered when Qualcomm Snapdragon devices process fastboot commands that are not syntactically correct. The improper validation allows malformed data to corrupt memory, potentially causing a crash or execution of arbitrary code. The CVSS score of 7.2 reflects a high severity impact that could compromise system confidentiality and integrity.

All Snapdragon platforms that support the fastboot protocol and have not received the latest firmware update are affected. Specific firmware revisions, device models, or operating environments are not detailed in the advisory, so any device employing fastboot without the vendor’s fix remains at risk.

The vulnerability is not listed in CISA’s KEV catalog and no EPSS score is available. Exploitation requires the ability to deliver malicious fastboot commands, typically over a USB connection, so physical proximity or a compromised host is needed. While publicly known exploits have not been reported, the nature of the memory corruption and high CVSS score create a moderate to high potential risk for environments where fastboot access is enabled.