{"id":"CVE-2026-57554","published":"2026-10-06T07:16:58.760","lastModified":"2026-10-09T14:12:38.403","description":"Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.","cvssScore":7.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-416"],"vendors":["qualcomm"],"products":["snapdragon g1 gen 2 gaming platform firmware","snapdragon g1 gen 2 gaming platform","ar8031 firmware","ar8031","ar8035 firmware","ar8035","csra6620 firmware","csra6620","csra6640 firmware","csra6640","sm7435p firmware","sm7435p"],"references":[{"url":"https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2026-bulletin.html","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A memory corruption vulnerability exists when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations, potentially allowing attackers to execute arbitrary code with high privileges.","exploitability":"Exploitation requires local access with user privileges and specific timing conditions to trigger simultaneous thread access during FastRPC operations, making it moderately difficult but not highly complex to exploit.","blast_radius":"If exploited, this vulnerability could impact gaming platforms and network devices using Qualcomm's Snapdragon G1 Gen 2 and AR8031/AR8035 chipsets, potentially affecting a wide range of IoT and embedded systems.","remediation":"Upgrade to Snapdragon G1 Gen 2 firmware version 2.590 or later, or AR8031/AR8035 firmware version 2.590 or later as specified in the vendor advisory.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["memory-corruption","rpc","embedded"],"model":"garnet-coder","analyzedAt":"2026-10-13T08:55:57.654Z"}}