CVE-2026-25294 PUBLISHED

Buffer Over-read in WLAN Firmware

Assigner: qualcomm
Reserved: 02.02.2026 Published: 17.09.2026 Updated: 17.09.2026

Transient DOS while parsing frame during channel usage.

Metrics

CVSS Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CVSS Score: 7.4

Product Status

Vendor Qualcomm, Inc.
Product Snapdragon
Versions Default: unaffected
  • Version Cologne is affected
  • Version Congo is affected
  • Version CQ7790 is affected
  • Version CQ7790M is affected
  • Version CQ8845S is affected
  • Version FastConnect 6200 is affected
  • Version FastConnect 6700 is affected
  • Version FastConnect 6900 is affected
  • Version FastConnect 7800 is affected
  • Version MBM715 is affected
  • Version Orne is affected
  • Version Palawan25 is affected
  • Version Pandeiro is affected
  • Version Q-7790 is affected
  • Version QLN1083BD is affected
  • Version QLN1086BD is affected
  • Version QMP1000 is affected
  • Version QMP2001 is affected
  • Version QPA1083BD is affected
  • Version QPA1086BD is affected
  • Version Qualcomm FastConnect 8800 Mobile Connectivity System is affected
  • Version QXM1093 is affected
  • Version QXM1094 is affected
  • Version QXM1095 is affected
  • Version QXM1096 is affected
  • Version SC8380XP is affected
  • Version SM4875 is affected
  • Version SM6850 is affected
  • Version SM7675 is affected
  • Version SM7675P is affected
  • Version SM7750P is affected
  • Version SM8635 is affected
  • Version SM8635P is affected
  • Version SM8650Q is affected
  • Version SM8735P is affected
  • Version SM8750P is affected
  • Version SM8845P is affected
  • Version SM8950 is affected
  • Version SM8950P is affected
  • Version SM8975 is affected
  • Version SM8975P is affected
  • Version Snapdragon 7 Gen 4 Mobile Platform is affected
  • Version Snapdragon 8 Elite is affected
  • Version Snapdragon 8 Elite Gen 5 is affected
  • Version Snapdragon 8 Gen 3 Mobile Platform is affected
  • Version Snapdragon 8 Gen 5 is affected
  • Version SW-only is affected
  • Version WCD9370 is affected
  • Version WCD9375 is affected
  • Version WCD9378 is affected
  • Version WCD9380 is affected
  • Version WCD9385 is affected
  • Version WCD9390 is affected
  • Version WCD9395 is affected
  • Version WCN3988 is affected
  • Version WCN6450 is affected
  • Version WCN6755 is affected
  • Version WCN7760 is affected
  • Version WCN7860 is affected
  • Version WCN7861 is affected
  • Version WCN7880 is affected
  • Version WCN7881 is affected
  • Version WCN8841 is affected
  • Version WSA8830 is affected
  • Version WSA8832 is affected
  • Version WSA8835 is affected
  • Version WSA8840 is affected
  • Version WSA8845 is affected
  • Version WSA8845H is affected
  • Version WSA8850 is affected
  • Version WSA8850W is affected
  • Version WSA8855C is affected
  • Version X1E80100 is affected
  • Version XRV7209 is affected
  • Version XRV9209 is affected

References

Problem Types

  • CWE-126 Buffer Over-read CWE