CVE Field Guide
About Us
CVE-2026-25284
PUBLISHED
Buffer Over-read in OOBM
Assigner:
qualcomm
Reserved:
02.02.2026
Published:
17.09.2026
Updated:
17.09.2026
Information Disclosure when a pointer is reused after being deallocated.
Metrics
CVSS 3.1
CVSS Vector:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L
CVSS Score:
7.3
CVSS score
7.3
Attack Vector
Local
Scope
Changed
Attack Complexity
Low
Confidentiality Impact
High
Privileges Required
Low
Integrity Impact
None
User Interaction
None
Availability Impact
Low
CVSS 3.1
Product Status
Vendor
Qualcomm, Inc.
Product
Snapdragon
Versions
Default:
unaffected
Version Cologne is affected
Version FastConnect 7800 is affected
Version Snapdragon X2 Elite is affected
Version WCD9378C is affected
Version WSA8840 is affected
Version WSA8845 is affected
Version WSA8845H is affected
References
https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2026-bulletin.html
Problem Types
CWE-126 Buffer Over-read
CWE