CVE-2026-25290

Published: Set 17, 2026 Last Modified: Set 22, 2026
ExploitDB:
Other exploit source:
Google Dorks:
HIGH 7,8
Attack Vector: local
Attack Complexity: low
Privileges Required: low
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high

Description

AI Translation Available

Memory Corruption when validating large data buffers from external sources using addition to check buffer length.

190

Integer Overflow or Wraparound

Stable
Common Consequences
Security Scopes Affected:
Availability Integrity Confidentiality Access Control Other
Potential Impacts:
Dos: Crash, Exit, Or Restart Dos: Resource Consumption (Memory) Dos: Instability Modify Memory Execute Unauthorized Code Or Commands Bypass Protection Mechanism Alter Execution Logic Dos: Resource Consumption (Cpu)
Applicable Platforms
Languages: Not Language-Specific, C
View CWE Details
Operating System

Wsa8845 Firmware by Qualcomm

cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Cologne Firmware by Qualcomm

cpe:2.3:o:qualcomm:cologne_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Wcd9378C Firmware by Qualcomm

cpe:2.3:o:qualcomm:wcd9378c_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Fastconnect 7800 Firmware by Qualcomm

cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Wsa8845H Firmware by Qualcomm

cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Wsa8840 Firmware by Qualcomm

cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://docs.qualcomm.com/product/publicresources/securitybulletin/september-20…