CVE-2026-25263CWE-787

CVE-2026-25263

Medium · published October 6, 2026

CVSS v3.1
6.6
EPSS
0%
Percentile
0.0
In the wild
Unconfirmed
What it is

Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.

The record
Technical detail
CVSS v3.1
6.6 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00057 · 0.0th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-10-06T11:16Z
Affected products (166)
ProductVersionsFixed in
qualcomm/snapdragon_g1_gen_2_gaming_platform_firmwareall versions—
qualcomm/5g_fixed_wireless_access_platform_firmwareall versions—
qualcomm/9205_lte_modem_firmwareall versions—
qualcomm/9205s_modem_firmwareall versions—
qualcomm/aqt1000_firmwareall versions—
qualcomm/snapdragon_8c_compute_platform_\(sc8180xp-ad\)_firmwareall versions—
qualcomm/snapdragon_8cx_compute_platform_firmwareall versions—
qualcomm/snapdragon_8cx_compute_platform_\"poipu_pro\"_firmwareall versions—
qualcomm/snapdragon_8cx_gen_2_5g_compute_platform_firmwareall versions—
qualcomm/snapdragon_8cx_gen_2_5g_compute_platform_\"poipu_pro\"_firmwareall versions—
qualcomm/snapdragon_auto_5g_modem-rf_firmwareall versions—
qualcomm/snapdragon_wear_1300_platform_firmwareall versions—
qualcomm/snapdragon_x53_5g_modem-rf_system_firmwareall versions—
qualcomm/snapdragon_x55_5g_modem-rf_system_firmwareall versions—
qualcomm/snapdragon_xr2_5g_platform_firmwareall versions—
qualcomm/snapdragon_xr2\+_gen_1_platform_firmwareall versions—
qualcomm/snapdragon_auto_4g_modem_firmwareall versions—
qualcomm/vision_intelligence_400_platform_firmwareall versions—
qualcomm/wcd9306_firmwareall versions—
qualcomm/wcd9335_firmwareall versions—
qualcomm/wcd9340_firmwareall versions—
qualcomm/wcd9341_firmwareall versions—
qualcomm/wcd9360_firmwareall versions—
qualcomm/wcd9370_firmwareall versions—
qualcomm/wcd9371_firmwareall versions—
qualcomm/wcd9375_firmwareall versions—
qualcomm/wcd9378_firmwareall versions—
qualcomm/wcd9380_firmwareall versions—
qualcomm/wcd9385_firmwareall versions—
qualcomm/wcd9390_firmwareall versions—
qualcomm/wcd9395_firmwareall versions—
qualcomm/wcn3910_firmwareall versions—
qualcomm/wcn3950_firmwareall versions—
qualcomm/wcn3980_firmwareall versions—
qualcomm/wcn3988_firmwareall versions—
qualcomm/wcn3990_firmwareall versions—
qualcomm/wcn6650_firmwareall versions—
qualcomm/wcn6755_firmwareall versions—
qualcomm/wsa8810_firmwareall versions—
qualcomm/wsa8815_firmwareall versions—
qualcomm/wsa8830_firmwareall versions—
qualcomm/wsa8832_firmwareall versions—
qualcomm/wsa8835_firmwareall versions—
qualcomm/wsa8840_firmwareall versions—
qualcomm/wsa8845_firmwareall versions—
qualcomm/ar8031_firmwareall versions—
qualcomm/c-v2x_9150_firmwareall versions—
qualcomm/csra6620_firmwareall versions—
qualcomm/csra6640_firmwareall versions—
qualcomm/csrb31024_firmwareall versions—
qualcomm/fastconnect_6200_firmwareall versions—
qualcomm/fastconnect_6700_firmwareall versions—
qualcomm/fastconnect_6800_firmwareall versions—
qualcomm/fastconnect_6900_firmwareall versions—
qualcomm/fastconnect_7800_firmwareall versions—
qualcomm/flight_rb5_5g_platform_firmwareall versions—
qualcomm/fsm100_platform_firmwareall versions—
qualcomm/g1_gen_1_firmwareall versions—
qualcomm/g2_gen_1_firmwareall versions—
qualcomm/g3x_gen_2_firmwareall versions—
qualcomm/iq-615_firmwareall versions—
qualcomm/iq-8275_firmwareall versions—
qualcomm/iq-9075_firmwareall versions—
qualcomm/iqx5121_firmwareall versions—
qualcomm/iqx7181_firmwareall versions—
qualcomm/mbm415_firmwareall versions—
qualcomm/monaco_iot_firmwareall versions—
qualcomm/netrani_firmwareall versions—
qualcomm/qca0000_firmwareall versions—
qualcomm/qca2066_firmwareall versions—
qualcomm/qca4004_firmwareall versions—
qualcomm/qca6391_firmwareall versions—
qualcomm/qca6420_firmwareall versions—
qualcomm/qca6430_firmwareall versions—
qualcomm/qca6564_firmwareall versions—
qualcomm/qca6564a_firmwareall versions—
qualcomm/qca6564au_firmwareall versions—
qualcomm/qca6574_firmwareall versions—
qualcomm/qca6574a_firmwareall versions—
qualcomm/qca6574au_firmwareall versions—
qualcomm/qca6595_firmwareall versions—
qualcomm/qca6595au_firmwareall versions—
qualcomm/qca6688aq_firmwareall versions—
qualcomm/qca6696_firmwareall versions—
qualcomm/qca6698aq_firmwareall versions—
qualcomm/wsa8845h_firmwareall versions—
qualcomm/qca6698au_firmwareall versions—
qualcomm/qca6797aq_firmwareall versions—
qualcomm/qcc710_firmwareall versions—
qualcomm/qcm2290_firmwareall versions—
qualcomm/qcm4290_firmwareall versions—
qualcomm/qcm4325_firmwareall versions—
qualcomm/qcm4490_firmwareall versions—
qualcomm/qcm5430_firmwareall versions—
qualcomm/qcm6125_firmwareall versions—
qualcomm/qcm6490_firmwareall versions—
qualcomm/qcn9011_firmwareall versions—
qualcomm/qcn9012_firmwareall versions—
qualcomm/qcs2290_firmwareall versions—
qualcomm/qcs4290_firmwareall versions—
qualcomm/qcs4490_firmwareall versions—
qualcomm/qcs8550_firmwareall versions—
qualcomm/qts110_firmwareall versions—
qualcomm/video_collaboration_vc1_platform_firmwareall versions—
qualcomm/video_collaboration_vc3_platform_firmwareall versions—
qualcomm/video_collaboration_vc5_platform_firmwareall versions—
qualcomm/robotics_rb2_platform_firmwareall versions—
qualcomm/robotics_rb5_platform_firmwareall versions—
qualcomm/sa2150p_firmwareall versions—
qualcomm/sa4150p_firmwareall versions—
qualcomm/sa4155p_firmwareall versions—
qualcomm/sa6145p_firmwareall versions—
qualcomm/sa6150p_firmwareall versions—
qualcomm/sa6155_firmwareall versions—
qualcomm/sa6155p_firmwareall versions—
qualcomm/sa8145p_firmwareall versions—
qualcomm/sa8150p_firmwareall versions—
qualcomm/sa8155_firmwareall versions—
qualcomm/sa8155p_firmwareall versions—
qualcomm/sa8195p_firmwareall versions—
qualcomm/sc8380xp_firmwareall versions—
qualcomm/snapdragon_8_gen1_5g_firmwareall versions—
qualcomm/snapdragon_662_mobile_platform_firmwareall versions—
qualcomm/snapdragon_865_5g_mobile_platform_firmwareall versions—
qualcomm/sm6225p_firmwareall versions—
qualcomm/sm6250_firmwareall versions—
qualcomm/sm6450p_firmwareall versions—
qualcomm/sm6475p_firmwareall versions—
qualcomm/sm6475q_firmwareall versions—
qualcomm/sm7325p_firmwareall versions—
qualcomm/sm7435_firmwareall versions—
qualcomm/sm7435p_firmwareall versions—
qualcomm/sm7525_firmwareall versions—
qualcomm/sm7550_firmwareall versions—
qualcomm/sm7550p_firmwareall versions—
qualcomm/sm7635p_firmwareall versions—
qualcomm/sm8475p_firmwareall versions—
qualcomm/sm8550p_firmwareall versions—
qualcomm/smart_audio_400_platform_firmwareall versions—
qualcomm/snapdragon_4_gen_1_mobile_platform_firmwareall versions—
qualcomm/snapdragon_4_gen_2_mobile_platform_firmwareall versions—
qualcomm/snapdragon_460_mobile_platform_firmwareall versions—
qualcomm/snapdragon_480_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_480\+_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_6_gen_1_mobile_platform_firmwareall versions—
qualcomm/snapdragon_6_gen_3_mobile_platform_firmwareall versions—
qualcomm/snapdragon_680_4g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_685_4g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_695_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_7_gen_1_mobile_platform_firmwareall versions—
qualcomm/snapdragon_7\+_gen_2_mobile_platform_firmwareall versions—
qualcomm/snapdragon_778g_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_778g\+_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_782g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_7c_compute_platform_firmwareall versions—
qualcomm/snapdragon_7c_gen_2_compute_platform_firmwareall versions—
qualcomm/snapdragon_7c\+_gen_3_compute_firmwareall versions—
qualcomm/snapdragon_8_gen_1_mobile_platform_firmwareall versions—
qualcomm/snapdragon_8_gen_2_mobile_platform_firmwareall versions—
qualcomm/snapdragon_8\+_gen_1_mobile_platform_firmwareall versions—
qualcomm/snapdragon_8\+_gen_2_mobile_platform_firmwareall versions—
qualcomm/snapdragon_865\+_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_870_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_888_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_888\+_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_8c_compute_platform_firmwareall versions—
References (1)
https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2026-bulletin.html · [email protected]
EPSS history
Timeline
  • 07 OCT 03:40Z
    EPSS moved — → 0%
    epss
  • 06 OCT 06:29Z
    Out of Bounds write in Linux Camera
    cvelistv5