CVE Feed

    Dashboard / CVE / CVE-2026-25290

    CVE-2026-25290

    Memory Corruption when validating large data buffers from external sources using addition to check buffer length.

    Published:Sep 17, 2026
    Last Modified:Sep 22, 2026
    EPS:Sep 17, 2026
    EPSS Score:0.0011
    CVSS Score:7.8

    Affected Products

    Vendor
    Qualcomm
    Product
    Cologne
    Vendor
    Qualcomm
    Product
    Cologne Firmware
    Vendor
    Qualcomm
    Product
    Fastconnect 7800
    Vendor
    Qualcomm
    Product
    Fastconnect 7800 Firmware
    Vendor
    Qualcomm
    Product
    Snapdragon
    Vendor
    Qualcomm
    Product
    Snapdragon X2 Elite
    Vendor
    Qualcomm
    Product
    Snapdragon X2 Elite Firmware
    Vendor
    Qualcomm
    Product
    Wcd9378c
    Vendor
    Qualcomm
    Product
    Wcd9378c Firmware
    Vendor
    Qualcomm
    Product
    Wsa8840
    Vendor
    Qualcomm
    Product
    Wsa8840 Firmware
    Vendor
    Qualcomm
    Product
    Wsa8845
    Vendor
    Qualcomm
    Product
    Wsa8845 Firmware
    Vendor
    Qualcomm
    Product
    Wsa8845h
    Vendor
    Qualcomm
    Product
    Wsa8845h Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-190 Integer Overflow or Wraparound

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-92 Forced Integer Overflow

    Related CVEs

    CVE-2026-57559 (CVSS 7.8) — Memory corruption while processing service requests.…
    CVE-2026-57555 (CVSS 7.8) — Memory Corruption when executing system service routines due to improper handling of user input buffers.…
    CVE-2026-57545 (CVSS 7.8) — Memory corruption when processing draw objects of incorrect type during graphics command list execution.…
    CVE-2026-25302 (CVSS 7.1) — Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allo…
    CVE-2026-25274 (CVSS 6.7) — Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper sy…
    CVE-2026-25272 (CVSS 6.7) — Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during …
    CVE-2026-25270 (CVSS 6.7) — Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera…
    CVE-2026-25269 (CVSS 6.7) — Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds al…
    CVE-2026-25294 (CVSS 7.4) — Transient DOS while parsing frame during channel usage.…
    CVE-2026-25284 (CVSS 7.3) — Information Disclosure when a pointer is reused after being deallocated.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High