CVE-2026-25268 (GCVE-0-2026-25268)
Vulnerability from cvelistv5 – Published: 2026-07-06 20:09 – Updated: 2026-07-07 03:56
VLAI
Title
Stack-based Buffer Overflow in WLAN Host
Summary
Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations.
Severity
8.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-121 - Stack-based Buffer Overflow
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Qualcomm, Inc. | Snapdragon |
Affected:
5G Fixed Wireless Access Platform
Affected: AR8035 Affected: CQ7790 Affected: CQ8725S Affected: CSR8811 Affected: FastConnect 6700 Affected: FastConnect 6900 Affected: FastConnect 7800 Affected: FWA Gen 3 Ultra Platform Affected: FWA Gen 5 Elite Platform Affected: Immersive Home 214 Platform Affected: Immersive Home 216 Platform Affected: Immersive Home 316 Platform Affected: Immersive Home 318 Platform Affected: Immersive Home 3210 Platform Affected: Immersive Home 326 Platform Affected: IPQ5010 Affected: IPQ5028 Affected: IPQ5300 Affected: IPQ5302 Affected: IPQ5312 Affected: IPQ5332 Affected: IPQ6000 Affected: IPQ6010 Affected: IPQ6018 Affected: IPQ8076 Affected: IPQ8078 Affected: IPQ9008 Affected: IPQ9048 Affected: IPQ9554 Affected: IPQ9570 Affected: IPQ9574 Affected: Kobuk Affected: Marina Affected: Networking Pro 1200 Platform Affected: Networking Pro 1210 Platform Affected: Networking Pro 1610 Platform Affected: Networking Pro 400 Platform Affected: Networking Pro 600 Platform Affected: Networking Pro 610 Platform Affected: Networking Pro 800 Platform Affected: Networking Pro 810 Platform Affected: Orne Affected: QCA0000 Affected: QCA4024 Affected: QCA6174A Affected: QCA8075 Affected: QCA8080 Affected: QCA8081 Affected: QCA8082 Affected: QCA8084 Affected: QCA8085 Affected: QCA8101 Affected: QCA8102 Affected: QCA8111 Affected: QCA8112 Affected: QCA8337 Affected: QCA8384 Affected: QCA8385 Affected: QCA8386 Affected: QCA9888 Affected: QCA9889 Affected: QCC710 Affected: QCF8000 Affected: QCF8001 Affected: QCM5430 Affected: QCM6490 Affected: QCN5022 Affected: QCN5024 Affected: QCN5052 Affected: QCN5122 Affected: QCN5124 Affected: QCN5152 Affected: QCN5154 Affected: QCN5164 Affected: QCN5224 Affected: QCN6023 Affected: QCN6024 Affected: QCN6112 Affected: QCN6122 Affected: QCN6132 Affected: QCN6224 Affected: QCN6274 Affected: QCN6402 Affected: QCN6412 Affected: QCN6422 Affected: QCN6432 Affected: QCN9000 Affected: QCN9012 Affected: QCN9013 Affected: QCN9022 Affected: QCN9024 Affected: QCN9070 Affected: QCN9100 Affected: QCN9160 Affected: QCN9274 Affected: QFW7114 Affected: QFW7124 Affected: QFW7224 Affected: QMX82L Affected: QMX85L Affected: Qualcomm Video Collaboration VC3 Platform Affected: QXM8083 Affected: SAR2130P Affected: SDX61 Affected: SDX65M Affected: SDX81 Affected: Snapdragon 460 Mobile Platform Affected: Snapdragon 662 Mobile Platform Affected: Snapdragon Auto 5G Modem-RF Affected: Snapdragon X62 5G Modem-RF System Affected: Snapdragon X65 5G Modem-RF System Affected: Snapdragon X72 5G Modem-RF System Affected: Snapdragon X75 5G Modem-RF System Affected: SW-only Affected: WCD9340 Affected: WCD9370 Affected: WCD9375 Affected: WCD9380 Affected: WCD9385 Affected: WCN3950 Affected: WCN3988 Affected: WCN6755 Affected: WCN7861 Affected: WCN7881 Affected: WSA8830 Affected: WSA8832 Affected: WSA8835 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-25268",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-06T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-07-07T03:56:16.611Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Snapdragon Auto",
"Snapdragon Compute",
"Snapdragon Consumer IOT",
"Snapdragon Industrial IOT",
"Snapdragon Mobile",
"Snapdragon WBC",
"Snapdragon Wired Infrastructure and Networking"
],
"product": "Snapdragon",
"vendor": "Qualcomm, Inc.",
"versions": [
{
"status": "affected",
"version": "5G Fixed Wireless Access Platform"
},
{
"status": "affected",
"version": "AR8035"
},
{
"status": "affected",
"version": "CQ7790"
},
{
"status": "affected",
"version": "CQ8725S"
},
{
"status": "affected",
"version": "CSR8811"
},
{
"status": "affected",
"version": "FastConnect 6700"
},
{
"status": "affected",
"version": "FastConnect 6900"
},
{
"status": "affected",
"version": "FastConnect 7800"
},
{
"status": "affected",
"version": "FWA Gen 3 Ultra Platform"
},
{
"status": "affected",
"version": "FWA Gen 5 Elite Platform"
},
{
"status": "affected",
"version": "Immersive Home 214 Platform"
},
{
"status": "affected",
"version": "Immersive Home 216 Platform"
},
{
"status": "affected",
"version": "Immersive Home 316 Platform"
},
{
"status": "affected",
"version": "Immersive Home 318 Platform"
},
{
"status": "affected",
"version": "Immersive Home 3210 Platform"
},
{
"status": "affected",
"version": "Immersive Home 326 Platform"
},
{
"status": "affected",
"version": "IPQ5010"
},
{
"status": "affected",
"version": "IPQ5028"
},
{
"status": "affected",
"version": "IPQ5300"
},
{
"status": "affected",
"version": "IPQ5302"
},
{
"status": "affected",
"version": "IPQ5312"
},
{
"status": "affected",
"version": "IPQ5332"
},
{
"status": "affected",
"version": "IPQ6000"
},
{
"status": "affected",
"version": "IPQ6010"
},
{
"status": "affected",
"version": "IPQ6018"
},
{
"status": "affected",
"version": "IPQ8076"
},
{
"status": "affected",
"version": "IPQ8078"
},
{
"status": "affected",
"version": "IPQ9008"
},
{
"status": "affected",
"version": "IPQ9048"
},
{
"status": "affected",
"version": "IPQ9554"
},
{
"status": "affected",
"version": "IPQ9570"
},
{
"status": "affected",
"version": "IPQ9574"
},
{
"status": "affected",
"version": "Kobuk"
},
{
"status": "affected",
"version": "Marina"
},
{
"status": "affected",
"version": "Networking Pro 1200 Platform"
},
{
"status": "affected",
"version": "Networking Pro 1210 Platform"
},
{
"status": "affected",
"version": "Networking Pro 1610 Platform"
},
{
"status": "affected",
"version": "Networking Pro 400 Platform"
},
{
"status": "affected",
"version": "Networking Pro 600 Platform"
},
{
"status": "affected",
"version": "Networking Pro 610 Platform"
},
{
"status": "affected",
"version": "Networking Pro 800 Platform"
},
{
"status": "affected",
"version": "Networking Pro 810 Platform"
},
{
"status": "affected",
"version": "Orne"
},
{
"status": "affected",
"version": "QCA0000"
},
{
"status": "affected",
"version": "QCA4024"
},
{
"status": "affected",
"version": "QCA6174A"
},
{
"status": "affected",
"version": "QCA8075"
},
{
"status": "affected",
"version": "QCA8080"
},
{
"status": "affected",
"version": "QCA8081"
},
{
"status": "affected",
"version": "QCA8082"
},
{
"status": "affected",
"version": "QCA8084"
},
{
"status": "affected",
"version": "QCA8085"
},
{
"status": "affected",
"version": "QCA8101"
},
{
"status": "affected",
"version": "QCA8102"
},
{
"status": "affected",
"version": "QCA8111"
},
{
"status": "affected",
"version": "QCA8112"
},
{
"status": "affected",
"version": "QCA8337"
},
{
"status": "affected",
"version": "QCA8384"
},
{
"status": "affected",
"version": "QCA8385"
},
{
"status": "affected",
"version": "QCA8386"
},
{
"status": "affected",
"version": "QCA9888"
},
{
"status": "affected",
"version": "QCA9889"
},
{
"status": "affected",
"version": "QCC710"
},
{
"status": "affected",
"version": "QCF8000"
},
{
"status": "affected",
"version": "QCF8001"
},
{
"status": "affected",
"version": "QCM5430"
},
{
"status": "affected",
"version": "QCM6490"
},
{
"status": "affected",
"version": "QCN5022"
},
{
"status": "affected",
"version": "QCN5024"
},
{
"status": "affected",
"version": "QCN5052"
},
{
"status": "affected",
"version": "QCN5122"
},
{
"status": "affected",
"version": "QCN5124"
},
{
"status": "affected",
"version": "QCN5152"
},
{
"status": "affected",
"version": "QCN5154"
},
{
"status": "affected",
"version": "QCN5164"
},
{
"status": "affected",
"version": "QCN5224"
},
{
"status": "affected",
"version": "QCN6023"
},
{
"status": "affected",
"version": "QCN6024"
},
{
"status": "affected",
"version": "QCN6112"
},
{
"status": "affected",
"version": "QCN6122"
},
{
"status": "affected",
"version": "QCN6132"
},
{
"status": "affected",
"version": "QCN6224"
},
{
"status": "affected",
"version": "QCN6274"
},
{
"status": "affected",
"version": "QCN6402"
},
{
"status": "affected",
"version": "QCN6412"
},
{
"status": "affected",
"version": "QCN6422"
},
{
"status": "affected",
"version": "QCN6432"
},
{
"status": "affected",
"version": "QCN9000"
},
{
"status": "affected",
"version": "QCN9012"
},
{
"status": "affected",
"version": "QCN9013"
},
{
"status": "affected",
"version": "QCN9022"
},
{
"status": "affected",
"version": "QCN9024"
},
{
"status": "affected",
"version": "QCN9070"
},
{
"status": "affected",
"version": "QCN9100"
},
{
"status": "affected",
"version": "QCN9160"
},
{
"status": "affected",
"version": "QCN9274"
},
{
"status": "affected",
"version": "QFW7114"
},
{
"status": "affected",
"version": "QFW7124"
},
{
"status": "affected",
"version": "QFW7224"
},
{
"status": "affected",
"version": "QMX82L"
},
{
"status": "affected",
"version": "QMX85L"
},
{
"status": "affected",
"version": "Qualcomm Video Collaboration VC3 Platform"
},
{
"status": "affected",
"version": "QXM8083"
},
{
"status": "affected",
"version": "SAR2130P"
},
{
"status": "affected",
"version": "SDX61"
},
{
"status": "affected",
"version": "SDX65M"
},
{
"status": "affected",
"version": "SDX81"
},
{
"status": "affected",
"version": "Snapdragon 460 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 662 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon Auto 5G Modem-RF"
},
{
"status": "affected",
"version": "Snapdragon X62 5G Modem-RF System"
},
{
"status": "affected",
"version": "Snapdragon X65 5G Modem-RF System"
},
{
"status": "affected",
"version": "Snapdragon X72 5G Modem-RF System"
},
{
"status": "affected",
"version": "Snapdragon X75 5G Modem-RF System"
},
{
"status": "affected",
"version": "SW-only"
},
{
"status": "affected",
"version": "WCD9340"
},
{
"status": "affected",
"version": "WCD9370"
},
{
"status": "affected",
"version": "WCD9375"
},
{
"status": "affected",
"version": "WCD9380"
},
{
"status": "affected",
"version": "WCD9385"
},
{
"status": "affected",
"version": "WCN3950"
},
{
"status": "affected",
"version": "WCN3988"
},
{
"status": "affected",
"version": "WCN6755"
},
{
"status": "affected",
"version": "WCN7861"
},
{
"status": "affected",
"version": "WCN7881"
},
{
"status": "affected",
"version": "WSA8830"
},
{
"status": "affected",
"version": "WSA8832"
},
{
"status": "affected",
"version": "WSA8835"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-121",
"description": "CWE-121 Stack-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-06T20:09:41.411Z",
"orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
"shortName": "qualcomm"
},
"references": [
{
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2026-bulletin.html"
}
],
"title": "Stack-based Buffer Overflow in WLAN Host"
}
},
"cveMetadata": {
"assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
"assignerShortName": "qualcomm",
"cveId": "CVE-2026-25268",
"datePublished": "2026-07-06T20:09:41.411Z",
"dateReserved": "2026-02-02T04:19:00.940Z",
"dateUpdated": "2026-07-07T03:56:16.611Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2026-25268\",\"sourceIdentifier\":\"product-security@qualcomm.com\",\"published\":\"2026-07-06T21:16:54.730\",\"lastModified\":\"2026-07-07T05:16:49.867\",\"vulnStatus\":\"Received\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations.\"}],\"affected\":[{\"source\":\"product-security@qualcomm.com\",\"affectedData\":[{\"vendor\":\"Qualcomm, Inc.\",\"product\":\"Snapdragon\",\"defaultStatus\":\"unaffected\",\"platforms\":[\"Snapdragon Auto\",\"Snapdragon Compute\",\"Snapdragon Consumer IOT\",\"Snapdragon Industrial IOT\",\"Snapdragon Mobile\",\"Snapdragon WBC\",\"Snapdragon Wired Infrastructure and Networking\"],\"versions\":[{\"version\":\"5G Fixed Wireless Access Platform\",\"status\":\"affected\"},{\"version\":\"AR8035\",\"status\":\"affected\"},{\"version\":\"CQ7790\",\"status\":\"affected\"},{\"version\":\"CQ8725S\",\"status\":\"affected\"},{\"version\":\"CSR8811\",\"status\":\"affected\"},{\"version\":\"FastConnect 6700\",\"status\":\"affected\"},{\"version\":\"FastConnect 6900\",\"status\":\"affected\"},{\"version\":\"FastConnect 7800\",\"status\":\"affected\"},{\"version\":\"FWA Gen 3 Ultra Platform\",\"status\":\"affected\"},{\"version\":\"FWA Gen 5 Elite Platform\",\"status\":\"affected\"},{\"version\":\"Immersive Home 214 Platform\",\"status\":\"affected\"},{\"version\":\"Immersive Home 216 Platform\",\"status\":\"affected\"},{\"version\":\"Immersive Home 316 Platform\",\"status\":\"affected\"},{\"version\":\"Immersive Home 318 Platform\",\"status\":\"affected\"},{\"version\":\"Immersive Home 3210 Platform\",\"status\":\"affected\"},{\"version\":\"Immersive Home 326 Platform\",\"status\":\"affected\"},{\"version\":\"IPQ5010\",\"status\":\"affected\"},{\"version\":\"IPQ5028\",\"status\":\"affected\"},{\"version\":\"IPQ5300\",\"status\":\"affected\"},{\"version\":\"IPQ5302\",\"status\":\"affected\"},{\"version\":\"IPQ5312\",\"status\":\"affected\"},{\"version\":\"IPQ5332\",\"status\":\"affected\"},{\"version\":\"IPQ6000\",\"status\":\"affected\"},{\"version\":\"IPQ6010\",\"status\":\"affected\"},{\"version\":\"IPQ6018\",\"status\":\"affected\"},{\"version\":\"IPQ8076\",\"status\":\"affected\"},{\"version\":\"IPQ8078\",\"status\":\"affected\"},{\"version\":\"IPQ9008\",\"status\":\"affected\"},{\"version\":\"IPQ9048\",\"status\":\"affected\"},{\"version\":\"IPQ9554\",\"status\":\"affected\"},{\"version\":\"IPQ9570\",\"status\":\"affected\"},{\"version\":\"IPQ9574\",\"status\":\"affected\"},{\"version\":\"Kobuk\",\"status\":\"affected\"},{\"version\":\"Marina\",\"status\":\"affected\"},{\"version\":\"Networking Pro 1200 Platform\",\"status\":\"affected\"},{\"version\":\"Networking Pro 1210 Platform\",\"status\":\"affected\"},{\"version\":\"Networking Pro 1610 Platform\",\"status\":\"affected\"},{\"version\":\"Networking Pro 400 Platform\",\"status\":\"affected\"},{\"version\":\"Networking Pro 600 Platform\",\"status\":\"affected\"},{\"version\":\"Networking Pro 610 Platform\",\"status\":\"affected\"},{\"version\":\"Networking Pro 800 Platform\",\"status\":\"affected\"},{\"version\":\"Networking Pro 810 Platform\",\"status\":\"affected\"},{\"version\":\"Orne\",\"status\":\"affected\"},{\"version\":\"QCA0000\",\"status\":\"affected\"},{\"version\":\"QCA4024\",\"status\":\"affected\"},{\"version\":\"QCA6174A\",\"status\":\"affected\"},{\"version\":\"QCA8075\",\"status\":\"affected\"},{\"version\":\"QCA8080\",\"status\":\"affected\"},{\"version\":\"QCA8081\",\"status\":\"affected\"},{\"version\":\"QCA8082\",\"status\":\"affected\"},{\"version\":\"QCA8084\",\"status\":\"affected\"},{\"version\":\"QCA8085\",\"status\":\"affected\"},{\"version\":\"QCA8101\",\"status\":\"affected\"},{\"version\":\"QCA8102\",\"status\":\"affected\"},{\"version\":\"QCA8111\",\"status\":\"affected\"},{\"version\":\"QCA8112\",\"status\":\"affected\"},{\"version\":\"QCA8337\",\"status\":\"affected\"},{\"version\":\"QCA8384\",\"status\":\"affected\"},{\"version\":\"QCA8385\",\"status\":\"affected\"},{\"version\":\"QCA8386\",\"status\":\"affected\"},{\"version\":\"QCA9888\",\"status\":\"affected\"},{\"version\":\"QCA9889\",\"status\":\"affected\"},{\"version\":\"QCC710\",\"status\":\"affected\"},{\"version\":\"QCF8000\",\"status\":\"affected\"},{\"version\":\"QCF8001\",\"status\":\"affected\"},{\"version\":\"QCM5430\",\"status\":\"affected\"},{\"version\":\"QCM6490\",\"status\":\"affected\"},{\"version\":\"QCN5022\",\"status\":\"affected\"},{\"version\":\"QCN5024\",\"status\":\"affected\"},{\"version\":\"QCN5052\",\"status\":\"affected\"},{\"version\":\"QCN5122\",\"status\":\"affected\"},{\"version\":\"QCN5124\",\"status\":\"affected\"},{\"version\":\"QCN5152\",\"status\":\"affected\"},{\"version\":\"QCN5154\",\"status\":\"affected\"},{\"version\":\"QCN5164\",\"status\":\"affected\"},{\"version\":\"QCN5224\",\"status\":\"affected\"},{\"version\":\"QCN6023\",\"status\":\"affected\"},{\"version\":\"QCN6024\",\"status\":\"affected\"},{\"version\":\"QCN6112\",\"status\":\"affected\"},{\"version\":\"QCN6122\",\"status\":\"affected\"},{\"version\":\"QCN6132\",\"status\":\"affected\"},{\"version\":\"QCN6224\",\"status\":\"affected\"},{\"version\":\"QCN6274\",\"status\":\"affected\"},{\"version\":\"QCN6402\",\"status\":\"affected\"},{\"version\":\"QCN6412\",\"status\":\"affected\"},{\"version\":\"QCN6422\",\"status\":\"affected\"},{\"version\":\"QCN6432\",\"status\":\"affected\"},{\"version\":\"QCN9000\",\"status\":\"affected\"},{\"version\":\"QCN9012\",\"status\":\"affected\"},{\"version\":\"QCN9013\",\"status\":\"affected\"},{\"version\":\"QCN9022\",\"status\":\"affected\"},{\"version\":\"QCN9024\",\"status\":\"affected\"},{\"version\":\"QCN9070\",\"status\":\"affected\"},{\"version\":\"QCN9100\",\"status\":\"affected\"},{\"version\":\"QCN9160\",\"status\":\"affected\"},{\"version\":\"QCN9274\",\"status\":\"affected\"},{\"version\":\"QFW7114\",\"status\":\"affected\"},{\"version\":\"QFW7124\",\"status\":\"affected\"},{\"version\":\"QFW7224\",\"status\":\"affected\"},{\"version\":\"QMX82L\",\"status\":\"affected\"},{\"version\":\"QMX85L\",\"status\":\"affected\"},{\"version\":\"Qualcomm Video Collaboration VC3 Platform\",\"status\":\"affected\"},{\"version\":\"QXM8083\",\"status\":\"affected\"},{\"version\":\"SAR2130P\",\"status\":\"affected\"},{\"version\":\"SDX61\",\"status\":\"affected\"},{\"version\":\"SDX65M\",\"status\":\"affected\"},{\"version\":\"SDX81\",\"status\":\"affected\"},{\"version\":\"Snapdragon 460 Mobile Platform\",\"status\":\"affected\"},{\"version\":\"Snapdragon 662 Mobile Platform\",\"status\":\"affected\"},{\"version\":\"Snapdragon Auto 5G Modem-RF\",\"status\":\"affected\"},{\"version\":\"Snapdragon X62 5G Modem-RF System\",\"status\":\"affected\"},{\"version\":\"Snapdragon X65 5G Modem-RF System\",\"status\":\"affected\"},{\"version\":\"Snapdragon X72 5G Modem-RF System\",\"status\":\"affected\"},{\"version\":\"Snapdragon X75 5G Modem-RF System\",\"status\":\"affected\"},{\"version\":\"SW-only\",\"status\":\"affected\"},{\"version\":\"WCD9340\",\"status\":\"affected\"},{\"version\":\"WCD9370\",\"status\":\"affected\"},{\"version\":\"WCD9375\",\"status\":\"affected\"},{\"version\":\"WCD9380\",\"status\":\"affected\"},{\"version\":\"WCD9385\",\"status\":\"affected\"},{\"version\":\"WCN3950\",\"status\":\"affected\"},{\"version\":\"WCN3988\",\"status\":\"affected\"},{\"version\":\"WCN6755\",\"status\":\"affected\"},{\"version\":\"WCN7861\",\"status\":\"affected\"},{\"version\":\"WCN7881\",\"status\":\"affected\"},{\"version\":\"WSA8830\",\"status\":\"affected\"},{\"version\":\"WSA8832\",\"status\":\"affected\"},{\"version\":\"WSA8835\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"product-security@qualcomm.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.0,\"impactScore\":6.0}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-07-06T00:00:00+00:00\",\"id\":\"CVE-2026-25268\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"product-security@qualcomm.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-121\"}]}],\"references\":[{\"url\":\"https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2026-bulletin.html\",\"source\":\"product-security@qualcomm.com\"}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-25268\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-07-06T20:56:10.674862Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-07-06T20:56:15.191Z\"}}], \"cna\": {\"title\": \"Stack-based Buffer Overflow in WLAN Host\", \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"CHANGED\", \"version\": \"3.1\", \"baseScore\": 8.8, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"HIGH\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Qualcomm, Inc.\", \"product\": \"Snapdragon\", \"versions\": [{\"status\": \"affected\", \"version\": \"5G Fixed Wireless Access Platform\"}, {\"status\": \"affected\", \"version\": \"AR8035\"}, {\"status\": \"affected\", \"version\": \"CQ7790\"}, {\"status\": \"affected\", \"version\": \"CQ8725S\"}, {\"status\": \"affected\", \"version\": \"CSR8811\"}, {\"status\": \"affected\", \"version\": \"FastConnect 6700\"}, {\"status\": \"affected\", \"version\": \"FastConnect 6900\"}, {\"status\": \"affected\", \"version\": \"FastConnect 7800\"}, {\"status\": \"affected\", \"version\": \"FWA Gen 3 Ultra Platform\"}, {\"status\": \"affected\", \"version\": \"FWA Gen 5 Elite Platform\"}, {\"status\": \"affected\", \"version\": \"Immersive Home 214 Platform\"}, {\"status\": \"affected\", \"version\": \"Immersive Home 216 Platform\"}, {\"status\": \"affected\", \"version\": \"Immersive Home 316 Platform\"}, {\"status\": \"affected\", \"version\": \"Immersive Home 318 Platform\"}, {\"status\": \"affected\", \"version\": \"Immersive Home 3210 Platform\"}, {\"status\": \"affected\", \"version\": \"Immersive Home 326 Platform\"}, {\"status\": \"affected\", \"version\": \"IPQ5010\"}, {\"status\": \"affected\", \"version\": \"IPQ5028\"}, {\"status\": \"affected\", \"version\": \"IPQ5300\"}, {\"status\": \"affected\", \"version\": \"IPQ5302\"}, {\"status\": \"affected\", \"version\": \"IPQ5312\"}, {\"status\": \"affected\", \"version\": \"IPQ5332\"}, {\"status\": \"affected\", \"version\": \"IPQ6000\"}, {\"status\": \"affected\", \"version\": \"IPQ6010\"}, {\"status\": \"affected\", \"version\": \"IPQ6018\"}, {\"status\": \"affected\", \"version\": \"IPQ8076\"}, {\"status\": \"affected\", \"version\": \"IPQ8078\"}, {\"status\": \"affected\", \"version\": \"IPQ9008\"}, {\"status\": \"affected\", \"version\": \"IPQ9048\"}, {\"status\": \"affected\", \"version\": \"IPQ9554\"}, {\"status\": \"affected\", \"version\": \"IPQ9570\"}, {\"status\": \"affected\", \"version\": \"IPQ9574\"}, {\"status\": \"affected\", \"version\": \"Kobuk\"}, {\"status\": \"affected\", \"version\": \"Marina\"}, {\"status\": \"affected\", \"version\": \"Networking Pro 1200 Platform\"}, {\"status\": \"affected\", \"version\": \"Networking Pro 1210 Platform\"}, {\"status\": \"affected\", \"version\": \"Networking Pro 1610 Platform\"}, {\"status\": \"affected\", \"version\": \"Networking Pro 400 Platform\"}, {\"status\": \"affected\", \"version\": \"Networking Pro 600 Platform\"}, {\"status\": \"affected\", \"version\": \"Networking Pro 610 Platform\"}, {\"status\": \"affected\", \"version\": \"Networking Pro 800 Platform\"}, {\"status\": \"affected\", \"version\": \"Networking Pro 810 Platform\"}, {\"status\": \"affected\", \"version\": \"Orne\"}, {\"status\": \"affected\", \"version\": \"QCA0000\"}, {\"status\": \"affected\", \"version\": \"QCA4024\"}, {\"status\": \"affected\", \"version\": \"QCA6174A\"}, {\"status\": \"affected\", \"version\": \"QCA8075\"}, {\"status\": \"affected\", \"version\": \"QCA8080\"}, {\"status\": \"affected\", \"version\": \"QCA8081\"}, {\"status\": \"affected\", \"version\": \"QCA8082\"}, {\"status\": \"affected\", \"version\": \"QCA8084\"}, {\"status\": \"affected\", \"version\": \"QCA8085\"}, {\"status\": \"affected\", \"version\": \"QCA8101\"}, {\"status\": \"affected\", \"version\": \"QCA8102\"}, {\"status\": \"affected\", \"version\": \"QCA8111\"}, {\"status\": \"affected\", \"version\": \"QCA8112\"}, {\"status\": \"affected\", \"version\": \"QCA8337\"}, {\"status\": \"affected\", \"version\": \"QCA8384\"}, {\"status\": \"affected\", \"version\": \"QCA8385\"}, {\"status\": \"affected\", \"version\": \"QCA8386\"}, {\"status\": \"affected\", \"version\": \"QCA9888\"}, {\"status\": \"affected\", \"version\": \"QCA9889\"}, {\"status\": \"affected\", \"version\": \"QCC710\"}, {\"status\": \"affected\", \"version\": \"QCF8000\"}, {\"status\": \"affected\", \"version\": \"QCF8001\"}, {\"status\": \"affected\", \"version\": \"QCM5430\"}, {\"status\": \"affected\", \"version\": \"QCM6490\"}, {\"status\": \"affected\", \"version\": \"QCN5022\"}, {\"status\": \"affected\", \"version\": \"QCN5024\"}, {\"status\": \"affected\", \"version\": \"QCN5052\"}, {\"status\": \"affected\", \"version\": \"QCN5122\"}, {\"status\": \"affected\", \"version\": \"QCN5124\"}, {\"status\": \"affected\", \"version\": \"QCN5152\"}, {\"status\": \"affected\", \"version\": \"QCN5154\"}, {\"status\": \"affected\", \"version\": \"QCN5164\"}, {\"status\": \"affected\", \"version\": \"QCN5224\"}, {\"status\": \"affected\", \"version\": \"QCN6023\"}, {\"status\": \"affected\", \"version\": \"QCN6024\"}, {\"status\": \"affected\", \"version\": \"QCN6112\"}, {\"status\": \"affected\", \"version\": \"QCN6122\"}, {\"status\": \"affected\", \"version\": \"QCN6132\"}, {\"status\": \"affected\", \"version\": \"QCN6224\"}, {\"status\": \"affected\", \"version\": \"QCN6274\"}, {\"status\": \"affected\", \"version\": \"QCN6402\"}, {\"status\": \"affected\", \"version\": \"QCN6412\"}, {\"status\": \"affected\", \"version\": \"QCN6422\"}, {\"status\": \"affected\", \"version\": \"QCN6432\"}, {\"status\": \"affected\", \"version\": \"QCN9000\"}, {\"status\": \"affected\", \"version\": \"QCN9012\"}, {\"status\": \"affected\", \"version\": \"QCN9013\"}, {\"status\": \"affected\", \"version\": \"QCN9022\"}, {\"status\": \"affected\", \"version\": \"QCN9024\"}, {\"status\": \"affected\", \"version\": \"QCN9070\"}, {\"status\": \"affected\", \"version\": \"QCN9100\"}, {\"status\": \"affected\", \"version\": \"QCN9160\"}, {\"status\": \"affected\", \"version\": \"QCN9274\"}, {\"status\": \"affected\", \"version\": \"QFW7114\"}, {\"status\": \"affected\", \"version\": \"QFW7124\"}, {\"status\": \"affected\", \"version\": \"QFW7224\"}, {\"status\": \"affected\", \"version\": \"QMX82L\"}, {\"status\": \"affected\", \"version\": \"QMX85L\"}, {\"status\": \"affected\", \"version\": \"Qualcomm Video Collaboration VC3 Platform\"}, {\"status\": \"affected\", \"version\": \"QXM8083\"}, {\"status\": \"affected\", \"version\": \"SAR2130P\"}, {\"status\": \"affected\", \"version\": \"SDX61\"}, {\"status\": \"affected\", \"version\": \"SDX65M\"}, {\"status\": \"affected\", \"version\": \"SDX81\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 460 Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 662 Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon Auto 5G Modem-RF\"}, {\"status\": \"affected\", \"version\": \"Snapdragon X62 5G Modem-RF System\"}, {\"status\": \"affected\", \"version\": \"Snapdragon X65 5G Modem-RF System\"}, {\"status\": \"affected\", \"version\": \"Snapdragon X72 5G Modem-RF System\"}, {\"status\": \"affected\", \"version\": \"Snapdragon X75 5G Modem-RF System\"}, {\"status\": \"affected\", \"version\": \"SW-only\"}, {\"status\": \"affected\", \"version\": \"WCD9340\"}, {\"status\": \"affected\", \"version\": \"WCD9370\"}, {\"status\": \"affected\", \"version\": \"WCD9375\"}, {\"status\": \"affected\", \"version\": \"WCD9380\"}, {\"status\": \"affected\", \"version\": \"WCD9385\"}, {\"status\": \"affected\", \"version\": \"WCN3950\"}, {\"status\": \"affected\", \"version\": \"WCN3988\"}, {\"status\": \"affected\", \"version\": \"WCN6755\"}, {\"status\": \"affected\", \"version\": \"WCN7861\"}, {\"status\": \"affected\", \"version\": \"WCN7881\"}, {\"status\": \"affected\", \"version\": \"WSA8830\"}, {\"status\": \"affected\", \"version\": \"WSA8832\"}, {\"status\": \"affected\", \"version\": \"WSA8835\"}], \"platforms\": [\"Snapdragon Auto\", \"Snapdragon Compute\", \"Snapdragon Consumer IOT\", \"Snapdragon Industrial IOT\", \"Snapdragon Mobile\", \"Snapdragon WBC\", \"Snapdragon Wired Infrastructure and Networking\"], \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2026-bulletin.html\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-121\", \"description\": \"CWE-121 Stack-based Buffer Overflow\"}]}], \"providerMetadata\": {\"orgId\": \"2cfc7d3e-20d3-47ac-8db7-1b7285aff15f\", \"shortName\": \"qualcomm\", \"dateUpdated\": \"2026-07-06T20:09:41.411Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-25268\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-07-07T03:56:16.611Z\", \"dateReserved\": \"2026-02-02T04:19:00.940Z\", \"assignerOrgId\": \"2cfc7d3e-20d3-47ac-8db7-1b7285aff15f\", \"datePublished\": \"2026-07-06T20:09:41.411Z\", \"assignerShortName\": \"qualcomm\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…