CVE-2026-25292

HIGH

MEDIUM Priority: 0.01 BB Relevance: 50/100

Published: 2026-08-04 Modified: 2026-10-23 First seen: 2026-10-29 Status: active

Low Complexity No Auth No Interaction Conf. Impact Integ. Impact Scope Change

AV: Physical

AC: Low

PR: None

UI: None

S: Changed

C: High

I: High

A: High

Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration.

CWE-1286

Vendor	Product	Version
qualcomm	ar8031_firmware	-
qualcomm	ar8035_firmware	-
qualcomm	cq7790_firmware	-
qualcomm	cq8725s_firmware	-
qualcomm	csra6620_firmware	-
qualcomm	csra6640_firmware	-
qualcomm	fastconnect_6200_firmware	-
qualcomm	fastconnect_6700_firmware	-
qualcomm	fastconnect_6900_firmware	-
qualcomm	fastconnect_7800_firmware	-
qualcomm	flight_rb5_5g_platform_firmware	-
qualcomm	fwa_gen_3_ultra_firmware	-
qualcomm	fwa_gen_5_elite_firmware	-
qualcomm	g1_gen_1_firmware	-
qualcomm	g2_gen_1_firmware	-
qualcomm	g3x_gen_2_firmware	-
qualcomm	kalpeni_firmware	-
qualcomm	kobuk_firmware	-
qualcomm	lemans_au_lgit_firmware	-
qualcomm	lemansau_firmware	-
qualcomm	milos_iot_firmware	-
qualcomm	molokai_firmware	-
qualcomm	netrani_firmware	-
qualcomm	orne_firmware	-
qualcomm	palawan25_firmware	-
qualcomm	pandeiro_firmware	-
qualcomm	qam8255p_firmware	-
qualcomm	qam8295p_firmware	-
qualcomm	qam8397p_firmware	-
qualcomm	qam8797p_firmware	-

Showing 30 of 211 entries

Patch Vendor Advisory

50 / 100

✓ No authentication
✓ Low complexity
✓ No user interaction

7.6 / 10.0 v3.1

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

0.15%

Raw Score 0.001550

Percentile 4.6%

Date 2026-10-29

2026-10-29

0.00155

2026-10-28

0.00155

nvd ref →