A memory corruption flaw exists when a non‑secure loader rewrites page tables before secure memory has been initialized. Because this corruption occurs in a privileged context, an attacker could gain the ability to execute arbitrary code with elevated privileges. The weakness is an instance of improper authorization allowing unauthorized memory alterations, and it potentially leads to full system compromise.

The flaw affects devices built on Qualcomm, Inc. Snapdragon platforms. No specific firmware or hardware revisions are listed; any system that uses a non‑secure loader during boot prior to secure memory setup may be vulnerable.

The CVSS score of 7.8 signifies a high severity. The EPSS score is not available, so concrete exploitation likelihood is unknown, but the flaw is not yet listed in CISA KEV. Attackers would need to reach a stage where the non‑secure loader is executing; the likely attack vector is local or physical access that allows manipulation of the bootloader process. Without an available patch, the risk remains high for systems that cannot restrict or reconfigure the loader.