A critical stack-based buffer overflow in various Qualcomm Snapdragon components allows adjacent attackers to trigger memory corruption and achieve arbitrary code execution.

The vulnerability is a stack-based buffer overflow caused by improper length validation in NAN Service Discovery Frames. An unauthenticated attacker positioned on the local network (AV:A) can trigger this memory corruption.

Successful exploitation allows an attacker to gain control over the affected device, potentially leading to unauthorized access to sensitive data or complete device takeover. The CVSS score of 9.6 highlights the extreme severity of this flaw, which could impact a wide range of mobile and networking infrastructure.

Immediate Action: Consult the Qualcomm August 2026 security bulletin to identify the specific firmware or driver update required for your affected hardware model.

Proactive Monitoring: Monitor for unexpected device reboots or abnormal memory usage patterns in systems utilizing the affected Snapdragon chipsets.

Compensating Controls: Restrict access to local network segments where NAN (Neighbor Awareness Networking) services are broadcast to minimize the exposure surface.

Public Exploit Available: No

Users and administrators of Qualcomm-based hardware should verify their current firmware versions against the official August 2026 security bulletin. Apply the recommended updates immediately to prevent potential remote memory corruption and system takeover.