{"answers":{"affected":"It affects 292 products.","exploited":"There is no known exploitation of CVE-2026-25302 in the wild and no public exploit code.","fix":"No fix has been published for CVE-2026-25302 yet. Limit exposure of the affected software until one is available.","what":"CVE-2026-25302 is a high-severity vulnerability in Qualcomm Ar8035 Firmware, published on 6 Oct 2026. It can only be exploited from the same machine or local network, with no action from the victim."},"fix_prompt":"Check this codebase for CVE-2026-25302 and fix it if it is affected.\n\nWhat it is: CVE-2026-25302 is a high-severity vulnerability in Qualcomm Ar8035 Firmware, published on 6 Oct 2026. It can only be exploited from the same machine or local network, with no action from the victim.\nExploitation: There is no known exploitation of CVE-2026-25302 in the wild and no public exploit code.\n\nAffected product: Qualcomm Ar8035 Firmware. No package-level version data is available, so check the vendor advisory linked from the reference page.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2026-25302/ (Markdown: https://insights.sbomify.com/CVE-2026-25302/index.md)","id":"CVE-2026-25302","markdown":"https://insights.sbomify.com/CVE-2026-25302/index.md","name":"CVE-2026-25302","record":{"aliases":["GHSA-5mfp-688h-g4r8"],"analysis":{"component_type":"hardware_firmware","fix_type":"patch","impacts":["code_execution","privilege_escalation"],"network_reachable":"adjacent_or_local","non_default_config":false,"product_category":"Qualcomm Snapdragon Boot","requires_auth":"low_privilege","summary":"Attackers can bypass signature checks to mount unsigned images, enabling code execution and privilege escalation on Qualcomm Snapdragon devices.","user_interaction":"not_required","vuln_class":"security_feature_bypass"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"qualcomm","cpe":[{"product":"ar8035_firmware","vendor":"qualcomm"},{"product":"cologne_firmware","vendor":"qualcomm"},{"product":"cq2390m_firmware","vendor":"qualcomm"},{"product":"cq2390s_firmware","vendor":"qualcomm"},{"product":"cq7790_firmware","vendor":"qualcomm"},{"product":"cq7790m_firmware","vendor":"qualcomm"},{"product":"cq8725s_firmware","vendor":"qualcomm"},{"product":"cq8750m_firmware","vendor":"qualcomm"},{"product":"cq8845s_firmware","vendor":"qualcomm"},{"product":"cq8850ns_firmware","vendor":"qualcomm"},{"product":"csra6620_firmware","vendor":"qualcomm"},{"product":"csra6640_firmware","vendor":"qualcomm"},{"product":"fastconnect_6200_firmware","vendor":"qualcomm"},{"product":"fastconnect_6700_firmware","vendor":"qualcomm"},{"product":"fastconnect_6800_firmware","vendor":"qualcomm"},{"product":"fastconnect_6900_firmware","vendor":"qualcomm"},{"product":"fastconnect_7800_firmware","vendor":"qualcomm"},{"product":"flight_rb5_5g_platform_firmware","vendor":"qualcomm"},{"product":"fsm20055_firmware","vendor":"qualcomm"},{"product":"fsm200_platform_firmware","vendor":"qualcomm"},{"product":"fwa_gen_3_ultra_firmware","vendor":"qualcomm"},{"product":"fwa_gen_5_elite_firmware","vendor":"qualcomm"},{"product":"g1_gen_1_firmware","vendor":"qualcomm"},{"product":"g2_gen_1_firmware","vendor":"qualcomm"},{"product":"g3x_gen_2_firmware","vendor":"qualcomm"},{"product":"ipq9048_firmware","vendor":"qualcomm"},{"product":"ipq9570_firmware","vendor":"qualcomm"},{"product":"ipq9574_firmware","vendor":"qualcomm"},{"product":"iq-615_firmware","vendor":"qualcomm"},{"product":"iq-8275_firmware","vendor":"qualcomm"},{"product":"iq-9075_firmware","vendor":"qualcomm"},{"product":"iq10_series_firmware","vendor":"qualcomm"},{"product":"iqx5121_firmware","vendor":"qualcomm"},{"product":"iqx7181_firmware","vendor":"qualcomm"},{"product":"kalpeni_firmware","vendor":"qualcomm"},{"product":"kobuk_firmware","vendor":"qualcomm"},{"product":"lemans_au_lgit_firmware","vendor":"qualcomm"},{"product":"lemansau_firmware","vendor":"qualcomm"},{"product":"marina_firmware","vendor":"qualcomm"},{"product":"mbm415_firmware","vendor":"qualcomm"},{"product":"mbm715_firmware","vendor":"qualcomm"},{"product":"milos_firmware","vendor":"qualcomm"},{"product":"milos_iot_firmware","vendor":"qualcomm"},{"product":"monaco_iot_firmware","vendor":"qualcomm"},{"product":"netrani_firmware","vendor":"qualcomm"},{"product":"npro_a8_elite_platform_firmware","vendor":"qualcomm"},{"product":"orne_firmware","vendor":"qualcomm"},{"product":"palawan25_firmware","vendor":"qualcomm"},{"product":"pandeiro_firmware","vendor":"qualcomm"},{"product":"q-4390_firmware","vendor":"qualcomm"},{"product":"q-7790_firmware","vendor":"qualcomm"},{"product":"qam8255p_firmware","vendor":"qualcomm"},{"product":"qam8295p_firmware","vendor":"qualcomm"},{"product":"qam8620p_firmware","vendor":"qualcomm"},{"product":"qamsrv1h_firmware","vendor":"qualcomm"},{"product":"qamsrv1m_firmware","vendor":"qualcomm"},{"product":"qca0000_firmware","vendor":"qualcomm"},{"product":"qca6174a_firmware","vendor":"qualcomm"},{"product":"qca6391_firmware","vendor":"qualcomm"},{"product":"qca6564au_firmware","vendor":"qualcomm"},{"product":"qca6574a_firmware","vendor":"qualcomm"},{"product":"qca6574au_firmware","vendor":"qualcomm"},{"product":"qca6584au_firmware","vendor":"qualcomm"},{"product":"qca6595_firmware","vendor":"qualcomm"},{"product":"qca6595au_firmware","vendor":"qualcomm"},{"product":"qca6678aq_firmware","vendor":"qualcomm"},{"product":"qca6688aq_firmware","vendor":"qualcomm"},{"product":"qca6696_firmware","vendor":"qualcomm"},{"product":"qca6698aq_firmware","vendor":"qualcomm"},{"product":"qca6698au_firmware","vendor":"qualcomm"},{"product":"qca6797aq_firmware","vendor":"qualcomm"},{"product":"qca8075_firmware","vendor":"qualcomm"},{"product":"qca8080_firmware","vendor":"qualcomm"},{"product":"qca8081_firmware","vendor":"qualcomm"},{"product":"qca8082_firmware","vendor":"qualcomm"},{"product":"qca8084_firmware","vendor":"qualcomm"},{"product":"qca8085_firmware","vendor":"qualcomm"},{"product":"qca8101_firmware","vendor":"qualcomm"},{"product":"qca8102_firmware","vendor":"qualcomm"},{"product":"qca8111_firmware","vendor":"qualcomm"},{"product":"qca8112_firmware","vendor":"qualcomm"},{"product":"qca8337_firmware","vendor":"qualcomm"},{"product":"qca8384_firmware","vendor":"qualcomm"},{"product":"qca8385_firmware","vendor":"qualcomm"},{"product":"qca8386_firmware","vendor":"qualcomm"},{"product":"qca8695au_firmware","vendor":"qualcomm"},{"product":"qcc2070_firmware","vendor":"qualcomm"},{"product":"qcc6705_firmware","vendor":"qualcomm"},{"product":"qcc710_firmware","vendor":"qualcomm"},{"product":"qcf8001_firmware","vendor":"qualcomm"},{"product":"qcm2290_firmware","vendor":"qualcomm"},{"product":"qcm4290_firmware","vendor":"qualcomm"},{"product":"qcm4325_firmware","vendor":"qualcomm"},{"product":"qcm4490_firmware","vendor":"qualcomm"},{"product":"qcm5430_firmware","vendor":"qualcomm"},{"product":"qcm6490_firmware","vendor":"qualcomm"},{"product":"qcm8838_firmware","vendor":"qualcomm"},{"product":"qcn5124_firmware","vendor":"qualcomm"},{"product":"qcn5224_firmware","vendor":"qualcomm"},{"product":"qcn6024_firmware","vendor":"qualcomm"},{"product":"qcn6224_firmware","vendor":"qualcomm"},{"product":"qcn6274_firmware","vendor":"qualcomm"},{"product":"qcn9011_firmware","vendor":"qualcomm"},{"product":"qcn9012_firmware","vendor":"qualcomm"},{"product":"qcn9024_firmware","vendor":"qualcomm"},{"product":"qcn9274_firmware","vendor":"qualcomm"},{"product":"qcs2290_firmware","vendor":"qualcomm"},{"product":"qcs4290_firmware","vendor":"qualcomm"},{"product":"qcs4490_firmware","vendor":"qualcomm"},{"product":"qcs6690_firmware","vendor":"qualcomm"},{"product":"qcs8550_firmware","vendor":"qualcomm"},{"product":"qdu1000_firmware","vendor":"qualcomm"},{"product":"qdu1110_firmware","vendor":"qualcomm"},{"product":"qdu1210_firmware","vendor":"qualcomm"},{"product":"qdx1010_firmware","vendor":"qualcomm"},{"product":"qdx1011_firmware","vendor":"qualcomm"},{"product":"qep8111_firmware","vendor":"qualcomm"},{"product":"qfw7114_firmware","vendor":"qualcomm"},{"product":"qfw7124_firmware","vendor":"qualcomm"},{"product":"qfw7224_firmware","vendor":"qualcomm"},{"product":"qln1083bd_firmware","vendor":"qualcomm"},{"product":"qln1086bd_firmware","vendor":"qualcomm"},{"product":"qmp1000_firmware","vendor":"qualcomm"},{"product":"qmp2001_firmware","vendor":"qualcomm"},{"product":"qmx82l_firmware","vendor":"qualcomm"},{"product":"qmx85l_firmware","vendor":"qualcomm"},{"product":"qna715_firmware","vendor":"qualcomm"},{"product":"qpa1083bd_firmware","vendor":"qualcomm"},{"product":"qpa1086bd_firmware","vendor":"qualcomm"},{"product":"qru1032_firmware","vendor":"qualcomm"},{"product":"qualcomm_dragonwing_qru100_platform_firmware","vendor":"qualcomm"},{"product":"qualcomm_dragonwing_x100_accelerator_card_firmware","vendor":"qualcomm"},{"product":"qxm1083_firmware","vendor":"qualcomm"},{"product":"qxm1086_firmware","vendor":"qualcomm"},{"product":"qxm1093_firmware","vendor":"qualcomm"},{"product":"qxm1094_firmware","vendor":"qualcomm"},{"product":"qxm1095_firmware","vendor":"qualcomm"},{"product":"qxm1096_firmware","vendor":"qualcomm"},{"product":"robotics_rb2_platform_firmware","vendor":"qualcomm"},{"product":"robotics_rb5_platform_firmware","vendor":"qualcomm"},{"product":"sa510m_firmware","vendor":"qualcomm"},{"product":"sa7255p_firmware","vendor":"qualcomm"},{"product":"sa7775p_firmware","vendor":"qualcomm"},{"product":"sa8255p_firmware","vendor":"qualcomm"},{"product":"sa8295p_firmware","vendor":"qualcomm"},{"product":"sa8540p_firmware","vendor":"qualcomm"},{"product":"sa8620p_firmware","vendor":"qualcomm"},{"product":"sa8770p_firmware","vendor":"qualcomm"},{"product":"sa9000p_firmware","vendor":"qualcomm"},{"product":"sar1165p_firmware","vendor":"qualcomm"},{"product":"sar2130p_firmware","vendor":"qualcomm"},{"product":"sc8380xp_firmware","vendor":"qualcomm"},{"product":"sdr753_firmware","vendor":"qualcomm"},{"product":"sdx61_firmware","vendor":"qualcomm"},{"product":"sdx71m_firmware","vendor":"qualcomm"},{"product":"sdx81_firmware","vendor":"qualcomm"},{"product":"sm4850_firmware","vendor":"qualcomm"},{"product":"sm4850p_firmware","vendor":"qualcomm"},{"product":"sm4875_firmware","vendor":"qualcomm"},{"product":"sm6225p_firmware","vendor":"qualcomm"},{"product":"sm6450p_firmware","vendor":"qualcomm"},{"product":"sm6475p_firmware","vendor":"qualcomm"},{"product":"sm6475q_firmware","vendor":"qualcomm"},{"product":"sm6650p_firmware","vendor":"qualcomm"},{"product":"sm6850_firmware","vendor":"qualcomm"},{"product":"sm7325p_firmware","vendor":"qualcomm"},{"product":"sm7435_firmware","vendor":"qualcomm"},{"product":"sm7435p_firmware","vendor":"qualcomm"},{"product":"sm7525_firmware","vendor":"qualcomm"},{"product":"sm7550_firmware","vendor":"qualcomm"},{"product":"sm7550p_firmware","vendor":"qualcomm"},{"product":"sm7635p_firmware","vendor":"qualcomm"},{"product":"sm7675_firmware","vendor":"qualcomm"},{"product":"sm7675p_firmware","vendor":"qualcomm"},{"product":"sm7750p_firmware","vendor":"qualcomm"},{"product":"sm8475p_firmware","vendor":"qualcomm"},{"product":"sm8550p_firmware","vendor":"qualcomm"},{"product":"sm8635_firmware","vendor":"qualcomm"},{"product":"sm8635p_firmware","vendor":"qualcomm"},{"product":"sm8650q_firmware","vendor":"qualcomm"},{"product":"sm8735p_firmware","vendor":"qualcomm"},{"product":"sm8750p_firmware","vendor":"qualcomm"},{"product":"sm8845p_firmware","vendor":"qualcomm"},{"product":"smart_audio_400_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_460_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_480\\+_5g_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_480_5g_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_4_gen_1_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_4_gen_2_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_662_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_680_4g_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_685_4g_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_690_5g_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_695_5g_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_6_gen_1_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_6_gen_3_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_6_gen_4_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_778g\\+_5g_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_778g_5g_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_782g_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_7\\+_gen_2_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_7_gen_1_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_7_gen_4_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_7c\\+_gen_3_compute_firmware","vendor":"qualcomm"},{"product":"snapdragon_7s_gen_3_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_865\\+_5g_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_865_5g_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_870_5g_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_888\\+_5g_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_888_5g_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_8\\+_gen_1_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_8\\+_gen_2_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_8_elite_firmware","vendor":"qualcomm"},{"product":"snapdragon_8_elite_gen_5_firmware","vendor":"qualcomm"},{"product":"snapdragon_8_gen1_5g_firmware","vendor":"qualcomm"},{"product":"snapdragon_8_gen_1_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_8_gen_2_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_8_gen_3_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_8_gen_5_firmware","vendor":"qualcomm"},{"product":"snapdragon_8cx_gen_3_compute_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_ar1\\+_gen_1_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_ar1_gen_1_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_auto_5g_modem-rf_gen_2_firmware","vendor":"qualcomm"},{"product":"snapdragon_c_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_cockpit_elite_firmware","vendor":"qualcomm"},{"product":"snapdragon_g1_gen_2_gaming_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_reality_elite_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_ride_elite_firmware","vendor":"qualcomm"},{"product":"snapdragon_w5\\+_gen_1_wearable_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_wear_elite_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_x2_elite_firmware","vendor":"qualcomm"},{"product":"snapdragon_x32_5g_modem-rf_system_firmware","vendor":"qualcomm"},{"product":"snapdragon_x35_5g_modem-rf_system_firmware","vendor":"qualcomm"},{"product":"snapdragon_x53_5g_modem-rf_system_firmware","vendor":"qualcomm"},{"product":"snapdragon_x55_5g_modem-rf_system_firmware","vendor":"qualcomm"},{"product":"snapdragon_x62_5g_modem-rf_system_firmware","vendor":"qualcomm"},{"product":"snapdragon_x65_5g_modem-rf_system_firmware","vendor":"qualcomm"},{"product":"snapdragon_x70_modem-rf_system_firmware","vendor":"qualcomm"},{"product":"snapdragon_x72_5g_modem-rf_system_firmware","vendor":"qualcomm"},{"product":"snapdragon_x75_5g_modem-rf_system_firmware","vendor":"qualcomm"},{"product":"snapdragon_x80_5g_modem-rf_system_firmware","vendor":"qualcomm"},{"product":"snapdragon_xr2\\+_gen_1_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_xr2_5g_platform_firmware","vendor":"qualcomm"},{"product":"srv1h_firmware","vendor":"qualcomm"},{"product":"srv1l_firmware","vendor":"qualcomm"},{"product":"srv1m_firmware","vendor":"qualcomm"},{"product":"sw-only_firmware","vendor":"qualcomm"},{"product":"sw5100_firmware","vendor":"qualcomm"},{"product":"sw5100p_firmware","vendor":"qualcomm"},{"product":"sxr2230p_firmware","vendor":"qualcomm"},{"product":"sxr2250p_firmware","vendor":"qualcomm"},{"product":"themisto_firmware","vendor":"qualcomm"},{"product":"trestles_firmware","vendor":"qualcomm"},{"product":"video_collaboration_vc3_platform_firmware","vendor":"qualcomm"},{"product":"video_collaboration_vc5_platform_firmware","vendor":"qualcomm"},{"product":"wcd9335_firmware","vendor":"qualcomm"},{"product":"wcd9340_firmware","vendor":"qualcomm"},{"product":"wcd9370_firmware","vendor":"qualcomm"},{"product":"wcd9371_firmware","vendor":"qualcomm"},{"product":"wcd9375_firmware","vendor":"qualcomm"},{"product":"wcd9378_firmware","vendor":"qualcomm"},{"product":"wcd9378c_firmware","vendor":"qualcomm"},{"product":"wcd9380_firmware","vendor":"qualcomm"},{"product":"wcd9385_firmware","vendor":"qualcomm"},{"product":"wcd9390_firmware","vendor":"qualcomm"},{"product":"wcd9395_firmware","vendor":"qualcomm"},{"product":"wcn3910_firmware","vendor":"qualcomm"},{"product":"wcn3950_firmware","vendor":"qualcomm"},{"product":"wcn3980_firmware","vendor":"qualcomm"},{"product":"wcn3988_firmware","vendor":"qualcomm"},{"product":"wcn6450_firmware","vendor":"qualcomm"},{"product":"wcn6650_firmware","vendor":"qualcomm"},{"product":"wcn6755_firmware","vendor":"qualcomm"},{"product":"wcn7760_firmware","vendor":"qualcomm"},{"product":"wcn7860_firmware","vendor":"qualcomm"},{"product":"wcn7861_firmware","vendor":"qualcomm"},{"product":"wcn7880_firmware","vendor":"qualcomm"},{"product":"wcn7881_firmware","vendor":"qualcomm"},{"product":"wsa8810_firmware","vendor":"qualcomm"},{"product":"wsa8815_firmware","vendor":"qualcomm"},{"product":"wsa8830_firmware","vendor":"qualcomm"},{"product":"wsa8832_firmware","vendor":"qualcomm"},{"product":"wsa8835_firmware","vendor":"qualcomm"},{"product":"wsa8840_firmware","vendor":"qualcomm"},{"product":"wsa8845_firmware","vendor":"qualcomm"},{"product":"wsa8845h_firmware","vendor":"qualcomm"},{"product":"wsa8850_firmware","vendor":"qualcomm"},{"product":"wsa8850w_firmware","vendor":"qualcomm"},{"product":"wsa8855c_firmware","vendor":"qualcomm"},{"product":"x1e80100_firmware","vendor":"qualcomm"},{"product":"xrv7209_firmware","vendor":"qualcomm"},{"product":"xrv9209_firmware","vendor":"qualcomm"}],"cvss":{"score":7.1,"severity":"high","source":"cna","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","version":"3.1"},"cwes":[{"id":"CWE-347","name":"Improper Verification of Cryptographic Signature"}],"description":"Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.","ecosystems":[],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":null,"headline":"Improper Verification of Cryptographic Signature in Boot","id":"CVE-2026-25302","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":null,"product":"qualcomm:ar8035_firmware","products":["qualcomm:ar8035_firmware","qualcomm:cologne_firmware","qualcomm:csra6620_firmware","qualcomm:csra6640_firmware","qualcomm:fastconnect_6200_firmware","qualcomm:fastconnect_6700_firmware","qualcomm:fastconnect_6800_firmware","qualcomm:fastconnect_6900_firmware","qualcomm:fastconnect_7800_firmware","qualcomm:flight_rb5_5g_platform_firmware","qualcomm:ipq9570_firmware","qualcomm:ipq9574_firmware","qualcomm:orne_firmware","qualcomm:pandeiro_firmware","qualcomm:qam8255p_firmware","qualcomm:qam8295p_firmware","qualcomm:qam8620p_firmware","qualcomm:qamsrv1h_firmware","qualcomm:qamsrv1m_firmware","qualcomm:qca0000_firmware","qualcomm:qca6174a_firmware","qualcomm:qca6391_firmware","qualcomm:qca6564au_firmware","qualcomm:qca6574a_firmware","qualcomm:qca6574au_firmware","qualcomm:qca6584au_firmware","qualcomm:qca6595_firmware","qualcomm:qca6595au_firmware","qualcomm:qca6678aq_firmware","qualcomm:qca6688aq_firmware","qualcomm:qca6696_firmware","qualcomm:qca6698aq_firmware","qualcomm:qca6698au_firmware","qualcomm:qca6797aq_firmware","qualcomm:qca8075_firmware","qualcomm:qca8081_firmware","qualcomm:qca8082_firmware","qualcomm:qca8084_firmware","qualcomm:qca8085_firmware","qualcomm:qca8337_firmware","qualcomm:qca8386_firmware","qualcomm:qca8695au_firmware","qualcomm:qcc710_firmware","qualcomm:qcf8001_firmware","qualcomm:qcm2290_firmware","qualcomm:qcm4290_firmware","qualcomm:qcm4325_firmware","qualcomm:qcm4490_firmware","qualcomm:qcm5430_firmware","qualcomm:qcm6490_firmware","qualcomm:qcn5124_firmware","qualcomm:qcn6024_firmware","qualcomm:qcn6224_firmware","qualcomm:qcn6274_firmware","qualcomm:qcn9011_firmware","qualcomm:qcn9012_firmware","qualcomm:qcn9024_firmware","qualcomm:qcn9274_firmware","qualcomm:qcs2290_firmware","qualcomm:qcs4290_firmware","qualcomm:qcs4490_firmware","qualcomm:qcs8550_firmware","qualcomm:qdu1000_firmware","qualcomm:qdu1110_firmware","qualcomm:qdu1210_firmware","qualcomm:qdx1010_firmware","qualcomm:qdx1011_firmware","qualcomm:qep8111_firmware","qualcomm:qfw7114_firmware","qualcomm:qfw7124_firmware","qualcomm:qmp1000_firmware","qualcomm:qru1032_firmware","qualcomm:robotics_rb5_platform_firmware","qualcomm:sa7255p_firmware","qualcomm:sa7775p_firmware","qualcomm:sa8255p_firmware","qualcomm:sa8295p_firmware","qualcomm:sa8540p_firmware","qualcomm:sa8620p_firmware","qualcomm:sa8770p_firmware","qualcomm:sa9000p_firmware","qualcomm:sc8380xp_firmware","qualcomm:sdx61_firmware","qualcomm:sm6650p_firmware","qualcomm:sm7325p_firmware","qualcomm:sm7435_firmware","qualcomm:sm7550_firmware","qualcomm:sm7550p_firmware","qualcomm:sm7635p_firmware","qualcomm:sm7675_firmware","qualcomm:sm7675p_firmware","qualcomm:sm8475p_firmware","qualcomm:sm8550p_firmware","qualcomm:sm8635_firmware","qualcomm:sm8635p_firmware","qualcomm:sm8650q_firmware","qualcomm:sm8750p_firmware","qualcomm:smart_audio_400_platform_firmware","qualcomm:snapdragon_460_mobile_platform_firmware","qualcomm:snapdragon_480\\+_5g_mobile_platform_firmware","qualcomm:snapdragon_480_5g_mobile_platform_firmware","qualcomm:snapdragon_4_gen_1_mobile_platform_firmware","qualcomm:snapdragon_4_gen_2_mobile_platform_firmware","qualcomm:snapdragon_662_mobile_platform_firmware","qualcomm:snapdragon_680_4g_mobile_platform_firmware","qualcomm:snapdragon_685_4g_mobile_platform_firmware","qualcomm:snapdragon_690_5g_mobile_platform_firmware","qualcomm:snapdragon_695_5g_mobile_platform_firmware","qualcomm:snapdragon_6_gen_1_mobile_platform_firmware","qualcomm:snapdragon_778g\\+_5g_mobile_platform_firmware","qualcomm:snapdragon_778g_5g_mobile_platform_firmware","qualcomm:snapdragon_782g_mobile_platform_firmware","qualcomm:snapdragon_7c\\+_gen_3_compute_firmware","qualcomm:snapdragon_865\\+_5g_mobile_platform_firmware","qualcomm:snapdragon_865_5g_mobile_platform_firmware","qualcomm:snapdragon_870_5g_mobile_platform_firmware","qualcomm:snapdragon_888\\+_5g_mobile_platform_firmware","qualcomm:snapdragon_888_5g_mobile_platform_firmware","qualcomm:snapdragon_8\\+_gen_1_mobile_platform_firmware","qualcomm:snapdragon_8\\+_gen_2_mobile_platform_firmware","qualcomm:snapdragon_8_elite_firmware","qualcomm:snapdragon_8_gen_1_mobile_platform_firmware","qualcomm:snapdragon_8_gen_2_mobile_platform_firmware","qualcomm:snapdragon_8_gen_3_mobile_platform_firmware","qualcomm:snapdragon_8cx_gen_3_compute_platform_firmware","qualcomm:snapdragon_ar1_gen_1_platform_firmware","qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmware","qualcomm:snapdragon_w5\\+_gen_1_wearable_platform_firmware","qualcomm:snapdragon_x35_5g_modem-rf_system_firmware","qualcomm:snapdragon_x55_5g_modem-rf_system_firmware","qualcomm:snapdragon_x62_5g_modem-rf_system_firmware","qualcomm:snapdragon_x65_5g_modem-rf_system_firmware","qualcomm:snapdragon_x70_modem-rf_system_firmware","qualcomm:snapdragon_x72_5g_modem-rf_system_firmware","qualcomm:snapdragon_x75_5g_modem-rf_system_firmware","qualcomm:snapdragon_xr2\\+_gen_1_platform_firmware","qualcomm:snapdragon_xr2_5g_platform_firmware","qualcomm:srv1h_firmware","qualcomm:srv1l_firmware","qualcomm:srv1m_firmware","qualcomm:sw5100_firmware","qualcomm:sw5100p_firmware","qualcomm:sxr2230p_firmware","qualcomm:sxr2250p_firmware","qualcomm:video_collaboration_vc3_platform_firmware","qualcomm:video_collaboration_vc5_platform_firmware","qualcomm:wcd9335_firmware","qualcomm:wcd9340_firmware","qualcomm:wcd9370_firmware","qualcomm:wcd9371_firmware","qualcomm:wcd9375_firmware","qualcomm:wcd9378_firmware","qualcomm:wcd9378c_firmware","qualcomm:wcd9380_firmware","qualcomm:wcd9385_firmware","qualcomm:wcd9390_firmware","qualcomm:wcd9395_firmware","qualcomm:wcn3910_firmware","qualcomm:wcn3950_firmware","qualcomm:wcn3980_firmware","qualcomm:wcn3988_firmware","qualcomm:wcn6450_firmware","qualcomm:wcn6650_firmware","qualcomm:wcn6755_firmware","qualcomm:wcn7860_firmware","qualcomm:wcn7861_firmware","qualcomm:wcn7880_firmware","qualcomm:wcn7881_firmware","qualcomm:wsa8810_firmware","qualcomm:wsa8815_firmware","qualcomm:wsa8830_firmware","qualcomm:wsa8832_firmware","qualcomm:wsa8835_firmware","qualcomm:wsa8840_firmware","qualcomm:wsa8845_firmware","qualcomm:wsa8845h_firmware"],"type":"security_feature_bypass","year":"2026"},"n_packages":0,"n_references":1,"next":{"headline":"WordPress Jaroti theme \u003c 1.4.8 - Reflected Cross Site Scripting (XSS) vulnerability","id":"CVE-2026-25304"},"packages":[],"prev":{"headline":"Buffer Over-read in WLAN Firmware","id":"CVE-2026-25294"},"products":["Snapdragon"],"published":"2026-10-06","related":[{"cvss_score":8.4,"headline":"Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset","id":"CVE-2023-33106","kev_date_added":"2023-12-05","published":"2023-12-05"},{"cvss_score":9.8,"headline":"Improper Validation of Array Index in WLAN Host Communication","id":"CVE-2024-45569","kev_date_added":null,"published":"2025-02-03"},{"cvss_score":9.8,"headline":"Improper Input Validation in WIN SON","id":"CVE-2024-21473","kev_date_added":null,"published":"2024-04-01"},{"cvss_score":9.8,"headline":"Buffer Copy Without Checking Size of Input in Data Modem","id":"CVE-2023-28582","kev_date_added":null,"published":"2024-03-04"},{"cvss_score":9.8,"headline":"Use After Free in WLAN Host Communication","id":"CVE-2023-43552","kev_date_added":null,"published":"2024-03-04"},{"cvss_score":9.8,"headline":"Use of Out-of-range Pointer Offset in WLAN HOST","id":"CVE-2023-43553","kev_date_added":null,"published":"2024-03-04"},{"cvss_score":9.8,"headline":"Buffer Copy without Checking Size of Input in Data Modem","id":"CVE-2023-33025","kev_date_added":null,"published":"2024-01-02"}],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"US public information, NVD API terms","name":"NVD"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":"no","exploitation":"none","technical_impact":"total"},"state":"PUBLISHED","updated":"2026-10-06","vendors":["Qualcomm, Inc."]},"summary":"Attackers can bypass signature checks to mount unsigned images, enabling code execution and privilege escalation on Qualcomm Snapdragon devices.","url":"https://insights.sbomify.com/CVE-2026-25302/"}