Log in / Sign up

Vulnerability details

CVE-2026-25294

Qualcomm Snapdragon

Buffer Over-read in WLAN Firmware

CVSS 3.1
7.4High

Official description

Transient DOS while parsing frame during channel usage.

CVSS scores

ScoreVersionSourceVector
7.4High 3.1 CVEProject cvelistV5 (CNA) (qualcomm) CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Affected products

VendorProductVersionsSource
Qualcomm, Inc. Snapdragon CQ7790 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon CQ7790M CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon CQ8845S CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Cologne CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Congo CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon FastConnect 6200 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon FastConnect 6700 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon FastConnect 6900 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon FastConnect 7800 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon MBM715 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Orne CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Palawan25 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Pandeiro CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Q-7790 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QLN1083BD CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QLN1086BD CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QMP1000 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QMP2001 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QPA1083BD CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QPA1086BD CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QXM1093 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QXM1094 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QXM1095 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QXM1096 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Qualcomm FastConnect 8800 Mobile Connectivity System CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SC8380XP CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM4875 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM6850 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM7675 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM7675P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM7750P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM8635 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM8635P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM8650Q CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM8735P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM8750P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM8845P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM8950 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM8950P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM8975 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM8975P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SW-only CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 7 Gen 4 Mobile Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 8 Elite CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 8 Elite Gen 5 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 8 Gen 3 Mobile Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 8 Gen 5 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9370 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9375 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9378 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9380 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9385 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9390 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9395 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN3988 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN6450 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN6755 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN7760 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN7860 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN7861 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN7880 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN7881 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN8841 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8830 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8832 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8835 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8840 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8845 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8845H CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8850 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8850W CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8855C CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon X1E80100 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon XRV7209 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon XRV9209 CVEProject cvelistV5 (CNA)

References and advisories

1
Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published
2026-09-17
Last updated
2026-09-17
State
Published
Assigner (CNA)
qualcomm

Exploit prediction (EPSS)

0.16%
Probability of exploitation in 30 days
5.3%
Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable
No
Exploitation
None
Technical impact
Partial

Weaknesses (CWE)

  • CWE-126
    Buffer Over-read