← Back

CVE-2026-25281

nvd nist
Published: Sep 17, 2026Modified: Sep 22, 2026

JSON object

Loading...
7.4
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 4.0
Source: product-security@qualcomm.com (Secondary)

Description

Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation.

Affected (7)

Qualcomm
7 products
Cologne Firmware
Fastconnect 7800 Firmware
Snapdragon X2 Elite Firmware
Wcd9378c Firmware
Wsa8840 Firmware
Wsa8845 Firmware
Wsa8845h Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Cologne Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Cologne
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Fastconnect 7800 Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Fastconnect 7800
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Snapdragon X2 Elite Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Snapdragon X2 Elite
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Wcd9378c Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Wcd9378c
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Wsa8840 Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Wsa8840
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Wsa8845 Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Wsa8845
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Wsa8845h Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Wsa8845h
All versions

Related CWEs

CWE-770
Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (1)

Source: product-security@qualcomm.com
Vendor Advisory

Timeline

No history available yet.