CVE-2026-25290

nvd nist

Published: Sep 17, 2026Modified: Sep 22, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: product-security@qualcomm.com (Secondary)

Description

Memory Corruption when validating large data buffers from external sources using addition to check buffer length.

Affected (7)

Products: Qualcomm: Cologne Firmware, Fastconnect 7800 Firmware, Snapdragon X2 Elite Firmware, Wcd9378c Firmware, Wsa8840 Firmware, Wsa8845 Firmware, Wsa8845h Firmware

Qualcomm

7 products

Cologne Firmware

Fastconnect 7800 Firmware

Snapdragon X2 Elite Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Cologne Firmware	All versions

Running on/with	Platform Versions
Qualcomm Cologne	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Fastconnect 7800 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Fastconnect 7800	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Snapdragon X2 Elite Firmware	All versions

Running on/with	Platform Versions
Qualcomm Snapdragon X2 Elite	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcd9378c Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcd9378c	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wsa8840 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wsa8840	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wsa8845 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wsa8845	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wsa8845h Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wsa8845h	All versions

Related CWEs

CWE-190

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (1)

https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2026-bulletin.html

Source: product-security@qualcomm.com

Vendor Advisory

Timeline

No history available yet.