CVE Catalog
CVE-2026-25289
CriticalCVSS 9.6Summary
Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.
Risk Assessment
The risk includes potential system crash or remote code execution in the context of the vulnerable component, which could lead to compromise of device integrity and availability.
Recommendation
It is recommended to apply vendor-provided patches and monitor vulnerability advisories for the affected component.
Original NVD description (English source)
Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.