CVE-2026-57545
7.8 HIGHPublished 2026-10-06 · Updated 2026-10-09
AI risk analysis
- Summary
- This vulnerability allows memory corruption during graphics command list execution when processing draw objects of incorrect type, potentially leading to arbitrary code execution in the graphics subsystem. The flaw affects Qualcomm's Snapdragon G1 Gen 2 gaming platform firmware and related components.
- Exploitability
- Exploitation appears moderately difficult as it requires a specific sequence of graphics commands with malformed draw objects, likely requiring access to the device's graphics processing capabilities or a compromised application with graphics rendering privileges.
- Blast radius
- If exploited, this vulnerability could impact gaming performance and potentially allow attackers to execute arbitrary code on devices running Snapdragon G1 Gen 2 gaming platform firmware, affecting a wide range of mobile gaming devices.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Upgrade to Snapdragon G1 Gen 2 Gaming Platform Firmware version 2.590 or later
rcegraphicsmobile
Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
Memory corruption when processing draw objects of incorrect type during graphics command list execution.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-822
Vendors
qualcomm
Products
snapdragon g1 gen 2 gaming platform firmware, snapdragon g1 gen 2 gaming platform, ar8031 firmware, ar8031, cologne firmware, cologne, congo firmware, congo, cq2390m firmware, cq2390m, cq2390s firmware, cq2390s
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- CRITICALCVE-2026-105793PoC
- CRITICALCVE-2026-106241
- CRITICALCVE-2026-110165
- HIGHCVE-2026-20526
- CRITICALCVE-2026-103764PoC
- HIGHCVE-2026-70167
- HIGHCVE-2026-70275
- CRITICALCVE-2026-70300
Related by shared AI tags and CWE weakness class. Browse the full archive.