CVE-2026-25290
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk0th percentile - higher than 0% of all known CVEs
Summary
Memory Corruption when validating large data buffers from external sources using addition to check buffer length.
Risk Assessment
The risk includes potential system crashes or arbitrary code execution by an attacker, leading to data integrity and confidentiality breaches.
Recommendation
It is recommended to update the software to a patched version and limit trust in external data.
Other vulnerabilities in Qualcomm
See all- CVE-2025-47396High
Memory corruption occurs when a secure application is launched on a device with insufficient memory.
- CVE-2025-47394High
Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations.
- CVE-2025-47393High
Memory corruption while accessing resources in kernel driver.
- CVE-2025-47388High
Memory corruption while passing pages to DSP with an unaligned starting address.
- CVE-2025-47380High
Memory corruption while preprocessing IOCTLs in sensors.
- CVE-2025-47356High
Memory Corruption when multiple threads concurrently access and modify shared resources.
- CVE-2025-47348High
Memory corruption while processing identity credential operations in the trusted application.
- CVE-2025-47346High
Memory corruption while processing a secure logging command in the trusted application.
- CVE-2025-47345High
Cryptographic issue may occur while encrypting license data.
- CVE-2026-25294High
Transient DOS while parsing frame during channel usage.
Original NVD description (English source)
Memory Corruption when validating large data buffers from external sources using addition to check buffer length.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS