CVE-2026-25275CWE-126

CVE-2026-25275

High · published September 17, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
8.3
In the wild
Unconfirmed
What it is

Transient DOS when processing authentication frames with invalid FILS information element header lengths.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00191 · 8.3th percentile
Weakness
CWE-126 · Buffer Over-read
Published
2026-09-17T09:17Z
Affected products (376)
ProductVersionsFixed in
qualcomm/qxm1093_firmwareall versions—
qualcomm/qxm1094_firmwareall versions—
qualcomm/qxm1095_firmwareall versions—
qualcomm/wcd9340_firmwareall versions—
qualcomm/wcd9341_firmwareall versions—
qualcomm/wcd9360_firmwareall versions—
qualcomm/wcd9370_firmwareall versions—
qualcomm/wcd9371_firmwareall versions—
qualcomm/wcd9375_firmwareall versions—
qualcomm/wcd9378_firmwareall versions—
qualcomm/wcd9378c_firmwareall versions—
qualcomm/wcd9380_firmwareall versions—
qualcomm/wcd9385_firmwareall versions—
qualcomm/wcd9390_firmwareall versions—
qualcomm/wcd9395_firmwareall versions—
qualcomm/wcn3910_firmwareall versions—
qualcomm/wcn3950_firmwareall versions—
qualcomm/wcn3980_firmwareall versions—
qualcomm/wcn3988_firmwareall versions—
qualcomm/wcn3990_firmwareall versions—
qualcomm/wcn6450_firmwareall versions—
qualcomm/wcn6650_firmwareall versions—
qualcomm/wcn6755_firmwareall versions—
qualcomm/qam8255p_firmwareall versions—
qualcomm/qam8295p_firmwareall versions—
qualcomm/qamsrv1h_firmwareall versions—
qualcomm/qamsrv1m_firmwareall versions—
qualcomm/qca0000_firmwareall versions—
qualcomm/qca2062_firmwareall versions—
qualcomm/qca2064_firmwareall versions—
qualcomm/qca2065_firmwareall versions—
qualcomm/qca2066_firmwareall versions—
qualcomm/qca4024_firmwareall versions—
qualcomm/qca6391_firmwareall versions—
qualcomm/qca6420_firmwareall versions—
qualcomm/qca6428_firmwareall versions—
qualcomm/qca6430_firmwareall versions—
qualcomm/qca6438_firmwareall versions—
qualcomm/qca8072_firmwareall versions—
qualcomm/qca8075_firmwareall versions—
qualcomm/qca8080_firmwareall versions—
qualcomm/qca8081_firmwareall versions—
qualcomm/q-7790_firmwareall versions—
qualcomm/qca6554a_firmwareall versions—
qualcomm/qca6564au_firmwareall versions—
qualcomm/qca6574_firmwareall versions—
qualcomm/qca6574a_firmwareall versions—
qualcomm/qca6574au_firmwareall versions—
qualcomm/qca6584au_firmwareall versions—
qualcomm/qca6595_firmwareall versions—
qualcomm/qca6595au_firmwareall versions—
qualcomm/qca6678aq_firmwareall versions—
qualcomm/qca6688aq_firmwareall versions—
qualcomm/qca6696_firmwareall versions—
qualcomm/qca6698aq_firmwareall versions—
qualcomm/qca6698au_firmwareall versions—
qualcomm/qca6777aq_firmwareall versions—
qualcomm/qca6787aq_firmwareall versions—
qualcomm/qca6797aq_firmwareall versions—
qualcomm/qca8082_firmwareall versions—
qualcomm/qca8084_firmwareall versions—
qualcomm/qca8085_firmwareall versions—
qualcomm/qca8337_firmwareall versions—
qualcomm/sm7550_firmwareall versions—
qualcomm/sm7550p_firmwareall versions—
qualcomm/sm7635p_firmwareall versions—
qualcomm/sm7675_firmwareall versions—
qualcomm/sm7675p_firmwareall versions—
qualcomm/sm7750p_firmwareall versions—
qualcomm/sm8475p_firmwareall versions—
qualcomm/sm8550p_firmwareall versions—
qualcomm/sm8635_firmwareall versions—
qualcomm/sm8635p_firmwareall versions—
qualcomm/sm8650q_firmwareall versions—
qualcomm/sm8735p_firmwareall versions—
qualcomm/sm8750p_firmwareall versions—
qualcomm/sm8845p_firmwareall versions—
qualcomm/sm8950_firmwareall versions—
qualcomm/sm8950p_firmwareall versions—
qualcomm/sm8975_firmwareall versions—
qualcomm/sm8975p_firmwareall versions—
qualcomm/smart_audio_400_platform_firmwareall versions—
qualcomm/snapdragon_4_gen_1_mobile_platform_firmwareall versions—
qualcomm/snapdragon_4_gen_2_mobile_platform_firmwareall versions—
qualcomm/snapdragon_460_mobile_platform_firmwareall versions—
qualcomm/snapdragon_480_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_6_gen_3_mobile_platform_firmwareall versions—
qualcomm/snapdragon_6_gen_4_mobile_platform_firmwareall versions—
qualcomm/snapdragon_660_mobile_platform_firmwareall versions—
qualcomm/snapdragon_662_mobile_platform_firmwareall versions—
qualcomm/snapdragon_680_4g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_685_4g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_690_5g_mobile_platform_firmwareall versions—
qualcomm/csrb31024_firmwareall versions—
qualcomm/fastconnect_6200_firmwareall versions—
qualcomm/fastconnect_6700_firmwareall versions—
qualcomm/fastconnect_6800_firmwareall versions—
qualcomm/fastconnect_6900_firmwareall versions—
qualcomm/fastconnect_7800_firmwareall versions—
qualcomm/flight_rb5_5g_platform_firmwareall versions—
qualcomm/fwa_gen_3_ultra_firmwareall versions—
qualcomm/fwa_gen_5_elite_firmwareall versions—
qualcomm/g1_gen_1_firmwareall versions—
qualcomm/g2_gen_1_firmwareall versions—
qualcomm/g3x_gen_2_firmwareall versions—
qualcomm/immersive_home_214_platform_firmwareall versions—
qualcomm/immersive_home_216_platform_firmwareall versions—
qualcomm/immersive_home_316_platform_firmwareall versions—
qualcomm/immersive_home_318_platform_firmwareall versions—
qualcomm/immersive_home_3210_platform_firmwareall versions—
qualcomm/immersive_home_326_platform_firmwareall versions—
qualcomm/ipq5010_firmwareall versions—
qualcomm/ipq5028_firmwareall versions—
qualcomm/qcn7606_firmwareall versions—
qualcomm/qcn9000_firmwareall versions—
qualcomm/qcn9001_firmwareall versions—
qualcomm/snapdragon_480\+_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_6_gen_1_mobile_platform_firmwareall versions—
qualcomm/snapdragon_695_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_7_gen_1_mobile_platform_firmwareall versions—
qualcomm/snapdragon_7_gen_4_mobile_platform_firmwareall versions—
qualcomm/snapdragon_7\+_gen_2_mobile_platform_firmwareall versions—
qualcomm/snapdragon_778g_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_778g\+_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_782g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_7c_compute_platform_firmwareall versions—
qualcomm/snapdragon_g1_gen_2_gaming_platform_firmwareall versions—
qualcomm/5g_fixed_wireless_access_platform_firmwareall versions—
qualcomm/aqt1000_firmwareall versions—
qualcomm/ar8031_firmwareall versions—
qualcomm/ar8035_firmwareall versions—
qualcomm/c110100_firmwareall versions—
qualcomm/cologne_firmwareall versions—
qualcomm/congo_firmwareall versions—
qualcomm/cq2390m_firmwareall versions—
qualcomm/cq2390s_firmwareall versions—
qualcomm/cq7790_firmwareall versions—
qualcomm/cq7790m_firmwareall versions—
qualcomm/cq8725s_firmwareall versions—
qualcomm/cq8750m_firmwareall versions—
qualcomm/cq8845s_firmwareall versions—
qualcomm/csr8811_firmwareall versions—
qualcomm/csra6620_firmwareall versions—
qualcomm/csra6640_firmwareall versions—
qualcomm/ipq5302_firmwareall versions—
qualcomm/ipq5312_firmwareall versions—
qualcomm/ipq5332_firmwareall versions—
qualcomm/ipq6000_firmwareall versions—
qualcomm/ipq6010_firmwareall versions—
qualcomm/ipq6018_firmwareall versions—
qualcomm/ipq8070_firmwareall versions—
qualcomm/qcn7605_firmwareall versions—
qualcomm/qmp2001_firmwareall versions—
qualcomm/qpa1083bd_firmwareall versions—
qualcomm/qpa1086bd_firmwareall versions—
qualcomm/fastconnect_8800_mobile_connectivity_system_firmwareall versions—
qualcomm/video_collaboration_vc1_platform_firmwareall versions—
qualcomm/video_collaboration_vc3_platform_firmwareall versions—
qualcomm/qxm1096_firmwareall versions—
qualcomm/robotics_rb2_platform_firmwareall versions—
qualcomm/robotics_rb5_platform_firmwareall versions—
qualcomm/sa4150p_firmwareall versions—
qualcomm/sa4155p_firmwareall versions—
qualcomm/snapdragon_reality_elite_platform_firmwareall versions—
qualcomm/srv1h_firmwareall versions—
qualcomm/srv1m_firmwareall versions—
qualcomm/sw-only_firmwareall versions—
qualcomm/qcn9002_firmwareall versions—
qualcomm/qcn9003_firmwareall versions—
qualcomm/qcn9011_firmwareall versions—
qualcomm/qcn9012_firmwareall versions—
qualcomm/qcn9022_firmwareall versions—
qualcomm/qcn9024_firmwareall versions—
qualcomm/qcn9070_firmwareall versions—
qualcomm/qcn9100_firmwareall versions—
qualcomm/qcn9274_firmwareall versions—
qualcomm/qcs2290_firmwareall versions—
qualcomm/qcs4290_firmwareall versions—
qualcomm/qcs4490_firmwareall versions—
qualcomm/qcs6690_firmwareall versions—
qualcomm/qcs8550_firmwareall versions—
qualcomm/qfw7114_firmwareall versions—
qualcomm/qfw7124_firmwareall versions—
qualcomm/qln1083bd_firmwareall versions—
qualcomm/qln1086bd_firmwareall versions—
qualcomm/qmp1000_firmwareall versions—
qualcomm/video_collaboration_vc5_platform_firmwareall versions—
qualcomm/qxm1083_firmwareall versions—
qualcomm/qxm1086_firmwareall versions—
qualcomm/sw5100_firmwareall versions—
qualcomm/sw5100p_firmwareall versions—
qualcomm/sxr2230p_firmwareall versions—
qualcomm/sxr2250p_firmwareall versions—
qualcomm/trestles_firmwareall versions—
qualcomm/vision_intelligence_400_platform_firmwareall versions—
qualcomm/wcd9335_firmwareall versions—
qualcomm/xrv9209_firmwareall versions—
qualcomm/qca8386_firmwareall versions—
qualcomm/qca8695au_firmwareall versions—
qualcomm/qca9888_firmwareall versions—
qualcomm/qca9889_firmwareall versions—
qualcomm/qcc2070_firmwareall versions—
qualcomm/qcc2073_firmwareall versions—
qualcomm/qcc2076_firmwareall versions—
qualcomm/qcc6705_firmwareall versions—
qualcomm/qcc710_firmwareall versions—
qualcomm/qcn5164_firmwareall versions—
qualcomm/qcn5550_firmwareall versions—
qualcomm/qcn6023_firmwareall versions—
qualcomm/qcn6024_firmwareall versions—
qualcomm/qcn6122_firmwareall versions—
qualcomm/qcn6132_firmwareall versions—
qualcomm/qcn6422_firmwareall versions—
qualcomm/qcn6432_firmwareall versions—
qualcomm/snapdragon_8_elite_gen_5_firmwareall versions—
qualcomm/snapdragon_888_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_888\+_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_8c_compute_platform_firmwareall versions—
qualcomm/snapdragon_8c_compute_platform_\(sc8180xp-ad\)_firmwareall versions—
qualcomm/snapdragon_8cx_compute_platform_firmwareall versions—
qualcomm/snapdragon_8cx_compute_platform_\"poipu_pro\"_firmwareall versions—
qualcomm/snapdragon_8cx_gen_2_5g_compute_platform_firmwareall versions—
qualcomm/snapdragon_8cx_gen_2_5g_compute_platform_\"poipu_pro\"_firmwareall versions—
qualcomm/snapdragon_8cx_gen_3_compute_platform_firmwareall versions—
qualcomm/snapdragon_ar1_gen_1_platform_firmwareall versions—
qualcomm/snapdragon_ar1\+_gen_1_platform_firmwareall versions—
qualcomm/snapdragon_auto_5g_modem-rf_firmwareall versions—
qualcomm/wcn7760_firmwareall versions—
qualcomm/wcn7860_firmwareall versions—
qualcomm/wcn7861_firmwareall versions—
qualcomm/wcn7880_firmwareall versions—
qualcomm/wcn7881_firmwareall versions—
qualcomm/wcn8841_firmwareall versions—
qualcomm/wsa8810_firmwareall versions—
qualcomm/wsa8815_firmwareall versions—
qualcomm/wsa8830_firmwareall versions—
qualcomm/ipq8071_firmwareall versions—
qualcomm/ipq8072_firmwareall versions—
qualcomm/ipq8074_firmwareall versions—
qualcomm/ipq8076_firmwareall versions—
qualcomm/ipq8078_firmwareall versions—
qualcomm/ipq9008_firmwareall versions—
qualcomm/ipq9554_firmwareall versions—
qualcomm/ipq9570_firmwareall versions—
qualcomm/ipq9574_firmwareall versions—
qualcomm/iq10_series_firmwareall versions—
qualcomm/iq-615_firmwareall versions—
qualcomm/iq-8275_firmwareall versions—
qualcomm/iq-9075_firmwareall versions—
qualcomm/iqx5121_firmwareall versions—
qualcomm/iqx7181_firmwareall versions—
qualcomm/kalpeni_firmwareall versions—
qualcomm/kobuk_firmwareall versions—
qualcomm/lemans_au_lgit_firmwareall versions—
qualcomm/lemansau_firmwareall versions—
qualcomm/marina_firmwareall versions—
qualcomm/mbm415_firmwareall versions—
qualcomm/mbm715_firmwareall versions—
qualcomm/milos_firmwareall versions—
qualcomm/milos_iot_firmwareall versions—
qualcomm/monaco_iot_firmwareall versions—
qualcomm/netrani_firmwareall versions—
qualcomm/networking_pro_1200_firmwareall versions—
qualcomm/networking_pro_1210_firmwareall versions—
qualcomm/networking_pro_1610_firmwareall versions—
qualcomm/networking_pro_400_firmwareall versions—
qualcomm/networking_pro_600_firmwareall versions—
qualcomm/networking_pro_610_firmwareall versions—
qualcomm/networking_pro_800_firmwareall versions—
qualcomm/networking_pro_810_firmwareall versions—
qualcomm/npro_a8_elite_firmwareall versions—
qualcomm/orne_firmwareall versions—
qualcomm/palawan25_firmwareall versions—
qualcomm/pandeiro_firmwareall versions—
qualcomm/pmp8074_firmwareall versions—
qualcomm/q-4390_firmwareall versions—
qualcomm/sa510m_firmwareall versions—
qualcomm/sa6145p_firmwareall versions—
qualcomm/sa6150p_firmwareall versions—
qualcomm/sa6155_firmwareall versions—
qualcomm/sa6155p_firmwareall versions—
qualcomm/sa7255p_firmwareall versions—
qualcomm/sa7775p_firmwareall versions—
qualcomm/sa8145p_firmwareall versions—
qualcomm/sa8150p_firmwareall versions—
qualcomm/sa8155_firmwareall versions—
qualcomm/sa8155p_firmwareall versions—
qualcomm/sa8195p_firmwareall versions—
qualcomm/sa8255p_firmwareall versions—
qualcomm/sa8295p_firmwareall versions—
qualcomm/sa8620p_firmwareall versions—
qualcomm/sa8770p_firmwareall versions—
qualcomm/sa9000p_firmwareall versions—
qualcomm/sar1165p_firmwareall versions—
qualcomm/sar2130p_firmwareall versions—
qualcomm/sc8380xp_firmwareall versions—
qualcomm/snapdragon_8_gen1_5g_firmwareall versions—
qualcomm/sd662_firmwareall versions—
qualcomm/sd865_5g_firmwareall versions—
qualcomm/sda660_firmwareall versions—
qualcomm/sdx65m_firmwareall versions—
qualcomm/sdx81_firmwareall versions—
qualcomm/sm4850_firmwareall versions—
qualcomm/sm4850p_firmwareall versions—
qualcomm/sm4875_firmwareall versions—
qualcomm/sm6225p_firmwareall versions—
qualcomm/sm6250_firmwareall versions—
qualcomm/sm6450p_firmwareall versions—
qualcomm/sm6475p_firmwareall versions—
qualcomm/sm6475q_firmwareall versions—
qualcomm/sm6650p_firmwareall versions—
qualcomm/sm6850_firmwareall versions—
qualcomm/sm7325p_firmwareall versions—
qualcomm/sm7435_firmwareall versions—
qualcomm/sm7435p_firmwareall versions—
qualcomm/sm7525_firmwareall versions—
qualcomm/wsa8832_firmwareall versions—
qualcomm/wsa8835_firmwareall versions—
qualcomm/wsa8840_firmwareall versions—
qualcomm/wsa8845_firmwareall versions—
qualcomm/wsa8845h_firmwareall versions—
qualcomm/wsa8850_firmwareall versions—
qualcomm/wsa8850w_firmwareall versions—
qualcomm/wsa8855c_firmwareall versions—
qualcomm/x1e80100_firmwareall versions—
qualcomm/xrv7209_firmwareall versions—
qualcomm/qcf8000_firmwareall versions—
qualcomm/qcf8001_firmwareall versions—
qualcomm/qcm2290_firmwareall versions—
qualcomm/qcm4290_firmwareall versions—
qualcomm/qcm4325_firmwareall versions—
qualcomm/qcm4490_firmwareall versions—
qualcomm/qcm5430_firmwareall versions—
qualcomm/qcm6125_firmwareall versions—
qualcomm/qcm6490_firmwareall versions—
qualcomm/qcn5021_firmwareall versions—
qualcomm/qcn5022_firmwareall versions—
qualcomm/qcn5024_firmwareall versions—
qualcomm/qcn5052_firmwareall versions—
qualcomm/qcn5054_firmwareall versions—
qualcomm/qcn5064_firmwareall versions—
qualcomm/qcn5122_firmwareall versions—
qualcomm/qcn5124_firmwareall versions—
qualcomm/qcn5152_firmwareall versions—
qualcomm/qcn5154_firmwareall versions—
qualcomm/qcn6224_firmwareall versions—
qualcomm/qcn6274_firmwareall versions—
qualcomm/qcn6402_firmwareall versions—
qualcomm/qcn6412_firmwareall versions—
qualcomm/snapdragon_7c_gen_2_compute_platform_firmwareall versions—
qualcomm/snapdragon_7c\+_gen_3_compute_firmwareall versions—
qualcomm/snapdragon_7s_gen_3_mobile_platform_firmwareall versions—
qualcomm/snapdragon_8_elite_firmwareall versions—
qualcomm/snapdragon_8_gen_1_mobile_platform_firmwareall versions—
qualcomm/snapdragon_8_gen_2_mobile_platform_firmwareall versions—
qualcomm/snapdragon_8_gen_3_mobile_platform_firmwareall versions—
qualcomm/snapdragon_8_gen_5_firmwareall versions—
qualcomm/snapdragon_8\+_gen_1_mobile_platform_firmwareall versions—
qualcomm/snapdragon_8\+_gen_2_mobile_platform_firmwareall versions—
qualcomm/snapdragon_865_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_865\+_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_870_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_auto_5g_modem-rf_gen_2_firmwareall versions—
qualcomm/snapdragon_ride_elite_firmwareall versions—
qualcomm/snapdragon_w5\+_gen_1_wearable_platform_firmwareall versions—
qualcomm/snapdragon_x2_elite_firmwareall versions—
qualcomm/snapdragon_x35_5g_modem-rf_system_firmwareall versions—
qualcomm/snapdragon_x53_5g_modem-rf_system_firmwareall versions—
qualcomm/snapdragon_x55_5g_modem-rf_system_firmwareall versions—
qualcomm/snapdragon_x65_5g_modem-rf_system_firmwareall versions—
qualcomm/snapdragon_x72_5g_modem-rf_system_firmwareall versions—
qualcomm/snapdragon_x75_5g_modem-rf_system_firmwareall versions—
qualcomm/snapdragon_xr2_5g_platform_firmwareall versions—
qualcomm/snapdragon_xr2\+_gen_1_platform_firmwareall versions—
qualcomm/snapdragon_auto_4g_modem_firmwareall versions—
qualcomm/snapdragon_cockpit_elite_firmwareall versions—
References (1)
EPSS history
Timeline
  • 18 SEP 03:58Z
    EPSS moved — → 0%
    epss
  • 17 SEP 04:11Z
    Buffer Over-read in WLAN Firmware
    cvelistv5