FKIE_CVE-2026-25273

Vulnerability from fkie_nvd - Published: 2026-10-06 07:16 - Updated: 2026-10-09 14:11
Summary
Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.
Impacted products
Vendor Product Version
qualcomm congo_firmware -
qualcomm congo -
qualcomm cq8845s_firmware -
qualcomm cq8845s -
qualcomm cq8850ns_firmware -
qualcomm cq8850ns -
qualcomm fastconnect_6200_firmware -
qualcomm fastconnect_6200 -
qualcomm fastconnect_6900_firmware -
qualcomm fastconnect_6900 -
qualcomm fastconnect_7800_firmware -
qualcomm fastconnect_7800 -
qualcomm orne_firmware -
qualcomm orne -
qualcomm pandeiro_firmware -
qualcomm pandeiro -
qualcomm qmp1000_firmware -
qualcomm qmp1000 -
qualcomm qmp2001_firmware -
qualcomm qmp2001 -
qualcomm fastconnect_8800_mobile_connectivity_system_firmware -
qualcomm fastconnect_8800_mobile_connectivity_system -
qualcomm snapdragon_865_5g_mobile_platform_firmware -
qualcomm snapdragon_865_5g_mobile_platform -
qualcomm sm4875_firmware -
qualcomm sm4875 -
qualcomm sm6850_firmware -
qualcomm sm6850 -
qualcomm sm8845p_firmware -
qualcomm sm8845p -
qualcomm sm8950_firmware -
qualcomm sm8950 -
qualcomm sm8950p_firmware -
qualcomm sm8950p -
qualcomm sm8975_firmware -
qualcomm sm8975 -
qualcomm sm8975p_firmware -
qualcomm sm8975p -
qualcomm snapdragon_460_mobile_platform_firmware -
qualcomm snapdragon_460_mobile_platform -
qualcomm snapdragon_662_mobile_platform_firmware -
qualcomm snapdragon_662_mobile_platform -
qualcomm snapdragon_8_elite_firmware -
qualcomm snapdragon_8_elite -
qualcomm snapdragon_8_elite_gen_5_firmware -
qualcomm snapdragon_8_elite_gen_5 -
qualcomm snapdragon_8_gen_5_firmware -
qualcomm snapdragon_8_gen_5 -
qualcomm snapdragon_xr2_5g_platform_firmware -
qualcomm snapdragon_xr2_5g_platform -
qualcomm snapdragon_xr2\+_gen_1_platform_firmware -
qualcomm snapdragon_xr2\+_gen_1_platform -
qualcomm wcd9370_firmware -
qualcomm wcd9370 -
qualcomm wcd9375_firmware -
qualcomm wcd9375 -
qualcomm wcd9378_firmware -
qualcomm wcd9378 -
qualcomm wcd9380_firmware -
qualcomm wcd9380 -
qualcomm wcd9395_firmware -
qualcomm wcd9395 -
qualcomm wcn3950_firmware -
qualcomm wcn3950 -
qualcomm wcn3988_firmware -
qualcomm wcn3988 -
qualcomm wcn6450_firmware -
qualcomm wcn6450 -
qualcomm wcn7760_firmware -
qualcomm wcn7760 -
qualcomm wcn7860_firmware -
qualcomm wcn7860 -
qualcomm wcn7861_firmware -
qualcomm wcn7861 -
qualcomm wcn7880_firmware -
qualcomm wcn7880 -
qualcomm wcn7881_firmware -
qualcomm wcn7881 -
qualcomm wcn8841_firmware -
qualcomm wcn8841 -
qualcomm wsa8810_firmware -
qualcomm wsa8810 -
qualcomm wsa8815_firmware -
qualcomm wsa8815 -
qualcomm wsa8830_firmware -
qualcomm wsa8830 -
qualcomm wsa8832_firmware -
qualcomm wsa8832 -
qualcomm wsa8835_firmware -
qualcomm wsa8835 -
qualcomm wsa8840_firmware -
qualcomm wsa8840 -
qualcomm wsa8845_firmware -
qualcomm wsa8845 -
qualcomm wsa8845h_firmware -
qualcomm wsa8845h -
qualcomm wsa8850_firmware -
qualcomm wsa8850 -
qualcomm wsa8850w_firmware -
qualcomm wsa8850w -
qualcomm wsa8855c_firmware -
qualcomm wsa8855c -

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Snapdragon Auto",
            "Snapdragon Compute",
            "Snapdragon Mobile"
          ],
          "product": "Snapdragon",
          "vendor": "Qualcomm, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "FastConnect 6900"
            },
            {
              "status": "affected",
              "version": "FastConnect 7800"
            },
            {
              "status": "affected",
              "version": "Pandeiro"
            },
            {
              "status": "affected",
              "version": "QCM8838"
            },
            {
              "status": "affected",
              "version": "SD865 5G"
            },
            {
              "status": "affected",
              "version": "SDR753"
            },
            {
              "status": "affected",
              "version": "Snapdragon 8 Elite Gen 5"
            },
            {
              "status": "affected",
              "version": "Snapdragon XR2 5G Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon XR2+ Gen 1 Platform"
            },
            {
              "status": "affected",
              "version": "WCD9380"
            },
            {
              "status": "affected",
              "version": "WCD9395"
            },
            {
              "status": "affected",
              "version": "WCN7860"
            },
            {
              "status": "affected",
              "version": "WCN7861"
            },
            {
              "status": "affected",
              "version": "WCN7880"
            },
            {
              "status": "affected",
              "version": "WCN7881"
            },
            {
              "status": "affected",
              "version": "WSA8810"
            },
            {
              "status": "affected",
              "version": "WSA8815"
            },
            {
              "status": "affected",
              "version": "WSA8840"
            },
            {
              "status": "affected",
              "version": "WSA8845"
            },
            {
              "status": "affected",
              "version": "WSA8845H"
            }
          ]
        }
      ],
      "source": "product-security@qualcomm.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:congo_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4DA1D059-7672-40F5-BB2E-3072475666A0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:congo:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "48C84939-F83F-4E79-902C-32B77C4A4BBB",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:cq8845s_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4FB1D261-4C1B-4D43-B8ED-975E526A2FF5",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:cq8845s:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "54AC5C16-88A9-4C16-B7AF-835E53D7DFA4",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:cq8850ns_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "867A0C11-FBA0-46F1-871F-1800A7A75BB3",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:cq8850ns:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9885533F-4021-429D-917F-0A2733725B43",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:fastconnect_6200_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "CDE1CBDE-3D28-463C-B215-AA7DF373EF09",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:fastconnect_6200:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "66BD3B88-7CF9-482D-A2DD-67F6ACF4CC57",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E670F500-9B71-4BBE-B5DA-221D35803C89",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:fastconnect_6900:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9ADEB5C5-B79A-4F45-B7D3-75945B38DB6C",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B3053D68-C5D8-4D47-A4F0-9F3AF2289E1D",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:fastconnect_7800:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "638DBC7F-456F-487D-BED2-2214DFF8BEE2",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:orne_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "19FB8345-BBFC-4E18-A4E6-64A159D7F65B",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:orne:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FFDA4056-3F1B-4F3A-BE59-1908BD3DE5E9",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:pandeiro_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "23F8EF0C-BB48-47E1-A045-254D79388F75",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:pandeiro:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "058950FC-ED72-4E91-AE13-87E738ADC083",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:qmp1000_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5298473D-8B34-42E6-BC32-69A3800972B4",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:qmp1000:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2A1CF44E-FFC2-4DCB-8DC2-46422D912448",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:qmp2001_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0B53AF78-37B0-4D64-A7D3-1729D0248D61",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:qmp2001:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "560E36D2-27DB-4590-A879-C2071ED72641",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:fastconnect_8800_mobile_connectivity_system_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "28C65092-164F-40B7-8DCF-0F72F19C1CC3",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:fastconnect_8800_mobile_connectivity_system:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C3813BD8-2228-414D-BB2B-E3C00210404A",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:snapdragon_865_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "6C9F4285-1F09-40CD-B1AA-84B406FD6A71",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:snapdragon_865_5g_mobile_platform:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8623DD44-DFDD-442D-9789-11A527A450A4",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:sm4875_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E21AC0DB-36FF-4B36-9CA9-809949B0CA53",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:sm4875:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "471434D6-35A1-4F4E-85C5-0180383BD315",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:sm6850_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "DE09FF94-7751-4EED-B269-C7BB056CA90C",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:sm6850:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "02B1463D-EE74-42DC-95D5-D0F66260CB32",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:sm8845p_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A205320E-6C60-4F6A-90D5-06CABAF0FDEA",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:sm8845p:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0FB8CE86-605E-4B3D-82E5-A55093ABCE5F",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:sm8950_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "09662E75-32BB-4D24-8A81-B743FF0DE323",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:sm8950:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8D44C02D-3FCA-4885-A1B5-7C2836B1233B",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:sm8950p_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9D5350DB-39BD-4BF4-87AB-5FD6DECB25D3",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:sm8950p:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0AE6E7D9-E7E8-490E-B801-D97F522CA0FA",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:sm8975_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "42D47A7D-A79C-4EA0-AEDF-533F4F9933B9",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:sm8975:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1CC31B0D-3890-442E-87BE-47E58A0F6537",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:sm8975p_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "73D04C5D-A3A8-45A3-A83E-03DF5EF400C2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:sm8975p:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A67DF502-A50C-4E7E-B457-F46B7149B85C",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:snapdragon_460_mobile_platform_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "390D7CAF-6C0B-4438-AA7D-AEEE127F4D3C",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:snapdragon_460_mobile_platform:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5BB1FC5E-CF6F-4E54-B78D-C01AFD034903",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:snapdragon_662_mobile_platform_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "37DF4D73-3ACC-41B3-8CA4-20DAECE6BFB7",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:snapdragon_662_mobile_platform:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FE08D23A-2D0D-4472-8847-27B955F55165",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:snapdragon_8_elite_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3EA50192-07B0-4404-93D4-EC4F3B1918B7",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:snapdragon_8_elite:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "26C7FC48-08CB-4E50-B8D3-8AF30549FDF8",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:snapdragon_8_elite_gen_5_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "41070BDB-15E4-4DD7-A132-A14AA24978E5",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:snapdragon_8_elite_gen_5:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "102460A6-9637-4883-9230-2CC888D5D74E",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:snapdragon_8_gen_5_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E4D8D8AD-B291-4AEC-8817-D7C99E79FF49",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:snapdragon_8_gen_5:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8CA08EA8-A47E-4797-8644-0A48D509939C",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:snapdragon_xr2_5g_platform_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1A129620-8241-4A47-AAC8-CC7E10A09C9C",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:snapdragon_xr2_5g_platform:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4CEDD78E-124C-4216-9B57-3B7B53463659",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:snapdragon_xr2\\+_gen_1_platform_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "BF9740EB-F82E-42EA-993E-A393B05CC6BB",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:snapdragon_xr2\\+_gen_1_platform:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "022A5532-03F7-4FB8-BA0D-4221178C9486",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1295D869-F4DD-4766-B4AA-3513752F43B4",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:wcd9370:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B98784DC-3143-4D38-AD28-DBBDCCAB4272",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "34143ABA-7D09-429F-A65C-3A33438BF62C",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:wcd9375:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9D56DFE3-5EF1-4B23-BBD5-0203FBF9CCEC",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:wcd9378_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4CFDBB5B-0A4F-4032-874F-D2A7EF933FB0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:wcd9378:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D28A12D6-CC60-4BE9-ADEE-FAB58B05440F",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "70292B01-617F-44AD-AF77-1AFC1450523D",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FA94C6D6-85DB-4031-AAF4-C399019AE16D",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:wcd9395_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "699056F6-1517-4F25-AE07-4FFCF6923B9F",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:wcd9395:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E4C023D2-6FF5-4FFC-B9F2-895979166580",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:wcn3950_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3FEF2DB6-00F5-4B07-953B-EF58B31267F1",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:wcn3950:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "120E8F0F-EBEB-4565-9927-2D473F783EF7",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E4BFB25F-013B-48E3-99FF-3E8687F94423",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:wcn3988:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "BF676C5B-838B-446C-A689-6A25AB8A87E2",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:wcn6450_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1FAFC9FA-E6EF-44C5-BD50-2824C7711541",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:wcn6450:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "6F895CDD-F9BB-45AD-AE60-71F4549114A4",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:wcn7760_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "506C6CE1-6BDF-4542-82C1-820D10D8181A",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:wcn7760:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "72F8CE3B-2BDC-40B1-BB04-A3A7E25B8096",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:wcn7860_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2EB8794F-7998-424E-AF68-E4A4F9310F65",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:wcn7860:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "799D69CE-3FCC-4B19-8B00-9AF38111D983",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:wcn7861_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "57608D47-894C-4895-B4B3-4733D55D57DB",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:wcn7861:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2FFD2C38-1A61-4BED-ABFA-DAE0C4B78620",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:wcn7880_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "63735D33-9F09-4841-9FE0-0D9AB604BECF",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:wcn7880:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E826F765-4C2E-4319-BBC4-DEB02AAD783F",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:wcn7881_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D765C392-5F38-4E6A-9E88-59629E7A6911",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:wcn7881:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FAE8F4F9-F692-4EC0-A3FE-2CDD681DCBFD",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:wcn8841_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C7A02129-BB8C-43F1-BFC1-3632BA299AB6",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:wcn8841:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4082B1D2-9CBD-48FE-93EF-C069A4B6A466",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "15307882-7039-43E9-9BA3-035045988B99",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:wsa8810:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AA85B322-E593-4499-829A-CC6D70BAE884",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E839A0B9-64C3-4C7A-82B7-D2AAF65928F8",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:wsa8815:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7E870D82-DE3B-4199-A730-C8FB545BAA98",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "11B69595-E488-4590-A150-CE5BE08B5E13",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "BF680174-5FA6-47D9-8EAB-CC2A37A7BD42",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:wsa8832_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7ACAD26E-B79E-4659-91A5-D301281F7D36",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:wsa8832:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F0E46DA6-9494-4D92-A4AE-A272AF6ACCCC",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F80BC68E-7476-4A40-9F48-53722FE9A5BF",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "6B36F4B2-BAA3-45AD-9967-0EB482C99708",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "CA33DE15-C177-43B3-AD50-FF797753D12E",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:wsa8840:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AE1A5841-5BCB-4033-ACB9-23F3FCA65309",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5B47BF35-3AA0-4667-842E-19B0FE30BF3C",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:wsa8845:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8A071672-9405-4418-9141-35CEADBB65AF",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "BB7CF473-8B25-4851-91F2-1BD693CCDC85",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:wsa8845h:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "91E591F2-8F72-4A5A-9264-2742EB2DABDA",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:wsa8850_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FA243934-7BFA-47AA-B78C-CCB25377E471",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:wsa8850:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2FD65035-4D20-48D5-874E-47CD9C7A985C",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:wsa8850w_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "22707187-A56D-48AD-800F-A438FD844546",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:wsa8850w:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F526A54A-F974-4D0A-A1A6-FABBB6711CD0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:wsa8855c_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "671E0B82-5D58-4644-8806-7F4CAFFB6641",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:wsa8855c:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "CC066321-B3CC-4E88-BFA9-414B8D095207",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Memory Corruption when processing camera operations due to out-of-bounds write during driver updates."
    }
  ],
  "id": "CVE-2026-25273",
  "lastModified": "2026-10-09T14:11:13.757",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 6.7,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 0.8,
        "impactScore": 5.9,
        "source": "product-security@qualcomm.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-25273",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-10-06T12:26:28.230789Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-10-06T07:16:57.647",
  "references": [
    {
      "source": "product-security@qualcomm.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2026-bulletin.html"
    }
  ],
  "sourceIdentifier": "product-security@qualcomm.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ],
      "source": "product-security@qualcomm.com",
      "type": "Secondary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…