← Back to search

CVE-2026-57545

7.8 HIGH

Published 2026-10-06 · Updated 2026-10-09

AI risk analysis

Summary
This vulnerability allows memory corruption during graphics command list execution when processing draw objects of incorrect type, potentially leading to arbitrary code execution in the graphics subsystem. The flaw affects Qualcomm's Snapdragon G1 Gen 2 gaming platform firmware and related components.
Exploitability
Exploitation appears moderately difficult as it requires a specific sequence of graphics commands with malformed draw objects, likely requiring access to the device's graphics processing capabilities or a compromised application with graphics rendering privileges.
Blast radius
If exploited, this vulnerability could impact gaming performance and potentially allow attackers to execute arbitrary code on devices running Snapdragon G1 Gen 2 gaming platform firmware, affecting a wide range of mobile gaming devices.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to Snapdragon G1 Gen 2 Gaming Platform Firmware version 2.590 or later
rcegraphicsmobile

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Memory corruption when processing draw objects of incorrect type during graphics command list execution.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-822

Vendors

qualcomm

Products

snapdragon g1 gen 2 gaming platform firmware, snapdragon g1 gen 2 gaming platform, ar8031 firmware, ar8031, cologne firmware, cologne, congo firmware, congo, cq2390m firmware, cq2390m, cq2390s firmware, cq2390s

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.