CVE-2026-25262

Published: Set 22, 2026 Last Modified: Set 22, 2026
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 6,9
Source: [email protected]
Attack Vector: physical
Attack Complexity: high
Privileges Required: low
User Interaction: required
Scope: changed
Confidentiality: high
Integrity: high
Availability: high

Description

AI Translation Available

Memory corruption while processing a crafted ELF file in the Primary Bootloader.

123

Write-what-where Condition

Draft
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Integrity Confidentiality Availability Access Control Other
Potential Impacts:
Modify Memory Execute Unauthorized Code Or Commands Gain Privileges Or Assume Identity Dos: Crash, Exit, Or Restart Bypass Protection Mechanism Other
Applicable Platforms
Languages: Memory-Unsafe, C, C++
Likelihood of Exploit: High
View CWE Details
https://docs.qualcomm.com/product/publicresources/securityb…
https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2026-bul…