{"id":"CVE-2026-57545","published":"2026-10-06T07:16:58.437","lastModified":"2026-10-09T14:12:14.660","description":"Memory corruption when processing draw objects of incorrect type during graphics command list execution.","cvssScore":7.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-822"],"vendors":["qualcomm"],"products":["snapdragon g1 gen 2 gaming platform firmware","snapdragon g1 gen 2 gaming platform","ar8031 firmware","ar8031","cologne firmware","cologne","congo firmware","congo","cq2390m firmware","cq2390m","cq2390s firmware","cq2390s"],"references":[{"url":"https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2026-bulletin.html","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This vulnerability allows memory corruption during graphics command list execution when processing draw objects of incorrect type, potentially leading to arbitrary code execution in the graphics subsystem. The flaw affects Qualcomm's Snapdragon G1 Gen 2 gaming platform firmware and related components.","exploitability":"Exploitation appears moderately difficult as it requires a specific sequence of graphics commands with malformed draw objects, likely requiring access to the device's graphics processing capabilities or a compromised application with graphics rendering privileges.","blast_radius":"If exploited, this vulnerability could impact gaming performance and potentially allow attackers to execute arbitrary code on devices running Snapdragon G1 Gen 2 gaming platform firmware, affecting a wide range of mobile gaming devices.","remediation":"Upgrade to Snapdragon G1 Gen 2 Gaming Platform Firmware version 2.590 or later","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","graphics","mobile"],"model":"garnet-coder","analyzedAt":"2026-10-13T08:56:06.226Z"}}