CVE-2026-25284

nvd nist

Published: Sep 17, 2026Modified: Sep 22, 2026

7.3

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

Exploitability: 2.0 / Impact: 4.7

Source: product-security@qualcomm.com (Secondary)

Description

Information Disclosure when a pointer is reused after being deallocated.

Affected (7)

Products: Qualcomm: Cologne Firmware, Fastconnect 7800 Firmware, Snapdragon X2 Elite Firmware, Wcd9378c Firmware, Wsa8840 Firmware, Wsa8845 Firmware, Wsa8845h Firmware

Qualcomm

7 products

Cologne Firmware

Fastconnect 7800 Firmware

Snapdragon X2 Elite Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Cologne Firmware	All versions

Running on/with	Platform Versions
Qualcomm Cologne	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Fastconnect 7800 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Fastconnect 7800	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Snapdragon X2 Elite Firmware	All versions

Running on/with	Platform Versions
Qualcomm Snapdragon X2 Elite	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcd9378c Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcd9378c	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wsa8840 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wsa8840	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wsa8845 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wsa8845	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wsa8845h Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wsa8845h	All versions

Related CWEs

CWE-126

Buffer Over-read

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

References (1)

https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2026-bulletin.html

Source: product-security@qualcomm.com

Vendor Advisory

Timeline

No history available yet.