CVE-2026-25289

Description

Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.

Traduire en français

Produits concernés

• Qualcomm, Inc. Snapdragon
• Qualcomm sm7550p firmware
• Qualcomm sm7635p firmware
• Qualcomm sm7675 firmware
• Qualcomm sm7675p firmware
• Qualcomm sm8425 firmware
• Qualcomm sm8550p firmware
• Qualcomm sm8635 firmware
• Qualcomm sm8635p firmware
• Qualcomm sm8650q firmware
• Qualcomm sm8735p firmware
• Qualcomm sm8750p firmware
• Qualcomm sm8845p firmware
• Qualcomm snapdragon 6 gen 1 mobile platform firmware
• Qualcomm snapdragon 6 gen 3 mobile platform firmware
• Qualcomm snapdragon 6 gen 4 mobile platform firmware
• Qualcomm snapdragon 7 gen 4 mobile platform firmware
• Qualcomm snapdragon 7s gen 3 mobile platform firmware
• Qualcomm snapdragon 8 elite firmware
• Qualcomm snapdragon 8 elite gen 5 firmware
• Qualcomm snapdragon 8 gen 2 mobile platform firmware
• Qualcomm snapdragon 8 gen 3 mobile platform firmware
• Qualcomm snapdragon 8\+ gen 2 mobile platform firmware
• Qualcomm snapdragon ar1 gen 1 platform firmware
• Qualcomm snapdragon ar1\+ gen 1 platform firmware

Scores CVSS

Faiblesses (CWE)

• CWE-121

Références

• https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-bulletin.html Vendor Advisory

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories