CVE Feed

    Dashboard / CVE / CVE-2026-25284

    CVE-2026-25284

    Information Disclosure when a pointer is reused after being deallocated.

    Published:Sep 17, 2026
    Last Modified:Sep 22, 2026
    EPS:Sep 17, 2026
    EPSS Score:0.00107
    CVSS Score:7.3

    Affected Products

    Vendor
    Qualcomm
    Product
    Cologne
    Vendor
    Qualcomm
    Product
    Cologne Firmware
    Vendor
    Qualcomm
    Product
    Fastconnect 7800
    Vendor
    Qualcomm
    Product
    Fastconnect 7800 Firmware
    Vendor
    Qualcomm
    Product
    Snapdragon
    Vendor
    Qualcomm
    Product
    Snapdragon X2 Elite
    Vendor
    Qualcomm
    Product
    Snapdragon X2 Elite Firmware
    Vendor
    Qualcomm
    Product
    Wcd9378c
    Vendor
    Qualcomm
    Product
    Wcd9378c Firmware
    Vendor
    Qualcomm
    Product
    Wsa8840
    Vendor
    Qualcomm
    Product
    Wsa8840 Firmware
    Vendor
    Qualcomm
    Product
    Wsa8845
    Vendor
    Qualcomm
    Product
    Wsa8845 Firmware
    Vendor
    Qualcomm
    Product
    Wsa8845h
    Vendor
    Qualcomm
    Product
    Wsa8845h Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-126 Buffer Over-read

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-57559 (CVSS 7.8) — Memory corruption while processing service requests.…
    CVE-2026-57555 (CVSS 7.8) — Memory Corruption when executing system service routines due to improper handling of user input buffers.…
    CVE-2026-57545 (CVSS 7.8) — Memory corruption when processing draw objects of incorrect type during graphics command list execution.…
    CVE-2026-25302 (CVSS 7.1) — Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allo…
    CVE-2026-25274 (CVSS 6.7) — Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper sy…
    CVE-2026-25272 (CVSS 6.7) — Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during …
    CVE-2026-25270 (CVSS 6.7) — Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera…
    CVE-2026-25269 (CVSS 6.7) — Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds al…
    CVE-2026-25294 (CVSS 7.4) — Transient DOS while parsing frame during channel usage.…
    CVE-2026-25290 (CVSS 7.8) — Memory Corruption when validating large data buffers from external sources using addition to check buffer leng…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High