CVE-2026-25291CWE-416

CVE-2026-25291

High · published October 6, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
0.0
In the wild
Unconfirmed
What it is

Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00070 · 0.0th percentile
Weakness
CWE-416 · Use After Free
Published
2026-10-06T11:16Z
Affected products (113)
ProductVersionsFixed in
qualcomm/sar1165p_firmwareall versions—
qualcomm/sc8380xp_firmwareall versions—
qualcomm/snapdragon_662_mobile_platform_firmwareall versions—
qualcomm/sm4875_firmwareall versions—
qualcomm/sm6225p_firmwareall versions—
qualcomm/sm6850_firmwareall versions—
qualcomm/sm7325p_firmwareall versions—
qualcomm/sm7435_firmwareall versions—
qualcomm/sm8845p_firmwareall versions—
qualcomm/snapdragon_4_gen_1_mobile_platform_firmwareall versions—
qualcomm/snapdragon_460_mobile_platform_firmwareall versions—
qualcomm/snapdragon_480_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_480\+_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_6_gen_1_mobile_platform_firmwareall versions—
qualcomm/snapdragon_6_gen_3_mobile_platform_firmwareall versions—
qualcomm/snapdragon_680_4g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_685_4g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_695_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_778g_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_778g\+_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_782g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_7c\+_gen_3_compute_firmwareall versions—
qualcomm/snapdragon_8_elite_firmwareall versions—
qualcomm/snapdragon_8_elite_gen_5_firmwareall versions—
qualcomm/snapdragon_8_gen_5_firmwareall versions—
qualcomm/snapdragon_888_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_888\+_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_ar1_gen_1_platform_firmwareall versions—
qualcomm/snapdragon_ar1\+_gen_1_platform_firmwareall versions—
qualcomm/snapdragon_w5\+_gen_1_wearable_platform_firmwareall versions—
qualcomm/snapdragon_x53_5g_modem-rf_system_firmwareall versions—
qualcomm/snapdragon_reality_elite_platform_firmwareall versions—
qualcomm/snapdragon_wear_elite_platform_firmwareall versions—
qualcomm/srv1h_firmwareall versions—
qualcomm/srv1m_firmwareall versions—
qualcomm/sw5100_firmwareall versions—
qualcomm/sw5100p_firmwareall versions—
qualcomm/themisto_firmwareall versions—
qualcomm/wcd9370_firmwareall versions—
qualcomm/wcd9375_firmwareall versions—
qualcomm/cq8845s_firmwareall versions—
qualcomm/cq8850ns_firmwareall versions—
qualcomm/fastconnect_6200_firmwareall versions—
qualcomm/fastconnect_6700_firmwareall versions—
qualcomm/fastconnect_6900_firmwareall versions—
qualcomm/fastconnect_7800_firmwareall versions—
qualcomm/iq-9075_firmwareall versions—
qualcomm/lemans_au_lgit_firmwareall versions—
qualcomm/lemansau_firmwareall versions—
qualcomm/milos_iot_firmwareall versions—
qualcomm/netrani_firmwareall versions—
qualcomm/orne_firmwareall versions—
qualcomm/pandeiro_firmwareall versions—
qualcomm/qam8255p_firmwareall versions—
qualcomm/qamsrv1h_firmwareall versions—
qualcomm/qamsrv1m_firmwareall versions—
qualcomm/qca6391_firmwareall versions—
qualcomm/qca6595_firmwareall versions—
qualcomm/qca6698aq_firmwareall versions—
qualcomm/qca6797aq_firmwareall versions—
qualcomm/qcm4290_firmwareall versions—
qualcomm/qcm5430_firmwareall versions—
qualcomm/qcm6490_firmwareall versions—
qualcomm/qcs4290_firmwareall versions—
qualcomm/qln1083bd_firmwareall versions—
qualcomm/qln1086bd_firmwareall versions—
qualcomm/qmp1000_firmwareall versions—
qualcomm/qmp2001_firmwareall versions—
qualcomm/qpa1083bd_firmwareall versions—
qualcomm/qpa1086bd_firmwareall versions—
qualcomm/video_collaboration_vc1_platform_firmwareall versions—
qualcomm/video_collaboration_vc3_platform_firmwareall versions—
qualcomm/qxm1083_firmwareall versions—
qualcomm/qxm1086_firmwareall versions—
qualcomm/qxm1093_firmwareall versions—
qualcomm/qxm1094_firmwareall versions—
qualcomm/qxm1095_firmwareall versions—
qualcomm/qxm1096_firmwareall versions—
qualcomm/sa7255p_firmwareall versions—
qualcomm/sa7775p_firmwareall versions—
qualcomm/sa8155p_firmwareall versions—
qualcomm/sa8255p_firmwareall versions—
qualcomm/sa8620p_firmwareall versions—
qualcomm/sa8770p_firmwareall versions—
qualcomm/sa9000p_firmwareall versions—
qualcomm/wcd9378_firmwareall versions—
qualcomm/wcd9380_firmwareall versions—
qualcomm/wcd9385_firmwareall versions—
qualcomm/wcd9395_firmwareall versions—
qualcomm/wcn3950_firmwareall versions—
qualcomm/wcn3980_firmwareall versions—
qualcomm/wcn3988_firmwareall versions—
qualcomm/wcn6450_firmwareall versions—
qualcomm/wcn6755_firmwareall versions—
qualcomm/wcn7760_firmwareall versions—
qualcomm/wcn7860_firmwareall versions—
qualcomm/wcn7861_firmwareall versions—
qualcomm/wcn7880_firmwareall versions—
qualcomm/wcn7881_firmwareall versions—
qualcomm/wsa8810_firmwareall versions—
qualcomm/wsa8815_firmwareall versions—
qualcomm/wsa8830_firmwareall versions—
qualcomm/wsa8832_firmwareall versions—
qualcomm/wsa8835_firmwareall versions—
qualcomm/wsa8840_firmwareall versions—
qualcomm/wsa8845_firmwareall versions—
qualcomm/wsa8845h_firmwareall versions—
qualcomm/wsa8850_firmwareall versions—
qualcomm/wsa8850w_firmwareall versions—
qualcomm/wsa8855c_firmwareall versions—
qualcomm/x1e80100_firmwareall versions—
qualcomm/xrv7209_firmwareall versions—
qualcomm/xrv9209_firmwareall versions—
References (1)
https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2026-bulletin.html · [email protected]
EPSS history
Timeline
  • 07 OCT 03:40Z
    EPSS moved — → 0%
    epss
  • 06 OCT 06:29Z
    Use After Free in Graphics
    cvelistv5