CVE-2026-25292

Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration.

CVSS v3 7.6 HIGH

7.6^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 0.9 / Impact : 6.0

Attack Vector PHYSICAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-bulletin.html

Configurations

No configuration.

History

04 Aug 2026, 16:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-08-04 16:16

Updated : 2026-08-04 17:16

NVD link : CVE-2026-25292

Mitre link : CVE-2026-25292

CVE.ORG link : CVE-2026-25292

JSON object : View

Products Affected

No product.

CWE

CWE-1286

Improper Validation of Syntactic Correctness of Input

{"id": "CVE-2026-25292", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-25292", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-08-04T15:51:26.416451Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "product-security@qualcomm.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.6, "attackVector": "PHYSICAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 0.9}]}, "affected": [{"source": "product-security@qualcomm.com", "affectedData": [{"vendor": "Qualcomm, Inc.", "product": "Snapdragon", "versions": [{"status": "affected", "version": "AR8035"}, {"status": "affected", "version": "CQ7790"}, {"status": "affected", "version": "CQ8725S"}, {"status": "affected", "version": "FastConnect 6200"}, {"status": "affected", "version": "FastConnect 6700"}, {"status": "affected", "version": "FastConnect 6900"}, {"status": "affected", "version": "FastConnect 7800"}, {"status": "affected", "version": "Flight RB5 5G Platform"}, {"status": "affected", "version": "FWA Gen 3 Ultra Platform"}, {"status": "affected", "version": "FWA Gen 5 Elite Platform"}, {"status": "affected", "version": "G1 Gen 1"}, {"status": "affected", "version": "G2 Gen 1"}, {"status": "affected", "version": "IQ10 Series"}, {"status": "affected", "version": "Kalpeni"}, {"status": "affected", "version": "Kobuk"}, {"status": "affected", "version": "LeMans_AU_LGIT"}, {"status": "affected", "version": "LeMansAU"}, {"status": "affected", "version": "Milos_IOT"}, {"status": "affected", "version": "Orne"}, {"status": "affected", "version": "Palawan25"}, {"status": "affected", "version": "Pandeiro"}, {"status": "affected", "version": "QAM8255P"}, {"status": "affected", "version": "QAM8295P"}, {"status": "affected", "version": "QAM8397P"}, {"status": "affected", "version": "QAM8620P"}, {"status": "affected", "version": "QAM8797P"}, {"status": "affected", "version": "QAMSRV1H"}, {"status": "affected", "version": "QAMSRV1M"}, {"status": "affected", "version": "QCA6174A"}, {"status": "affected", "version": "QCA6391"}, {"status": "affected", "version": "QCA6564AU"}, {"status": "affected", "version": "QCA6574"}, {"status": "affected", "version": "QCA6574A"}, {"status": "affected", "version": "QCA6574AU"}, {"status": "affected", "version": "QCA6584AU"}, {"status": "affected", "version": "QCA6595"}, {"status": "affected", "version": "QCA6595AU"}, {"status": "affected", "version": "QCA6678AQ"}, {"status": "affected", "version": "QCA6688AQ"}, {"status": "affected", "version": "QCA6696"}, {"status": "affected", "version": "QCA6698AQ"}, {"status": "affected", "version": "QCA6698AU"}, {"status": "affected", "version": "QCA6797AQ"}, {"status": "affected", "version": "QCA8081"}, {"status": "affected", "version": "QCA8337"}, {"status": "affected", "version": "QCA8386"}, {"status": "affected", "version": "QCA8695AU"}, {"status": "affected", "version": "QCA9367"}, {"status": "affected", "version": "QCA9377"}, {"status": "affected", "version": "QCC710"}, {"status": "affected", "version": "QCF8001"}, {"status": "affected", "version": "QCM2290"}, {"status": "affected", "version": "QCM4290"}, {"status": "affected", "version": "QCM4325"}, {"status": "affected", "version": "QCM4490"}, {"status": "affected", "version": "QCM6125"}, {"status": "affected", "version": "QCM6490"}, {"status": "affected", "version": "QCM8838"}, {"status": "affected", "version": "QCN6224"}, {"status": "affected", "version": "QCN6274"}, {"status": "affected", "version": "QCN9011"}, {"status": "affected", "version": "QCN9012"}, {"status": "affected", "version": "QCS2290"}, {"status": "affected", "version": "QCS410"}, {"status": "affected", "version": "QCS4290"}, {"status": "affected", "version": "QCS4490"}, {"status": "affected", "version": "QCS6690"}, {"status": "affected", "version": "QCS8550"}, {"status": "affected", "version": "QDU1000"}, {"status": "affected", "version": "QDU1110"}, {"status": "affected", "version": "QDU1210"}, {"status": "affected", "version": "QDX1010"}, {"status": "affected", "version": "QDX1011"}, {"status": "affected", "version": "QEP8111"}, {"status": "affected", "version": "QFW7114"}, {"status": "affected", "version": "QFW7124"}, {"status": "affected", "version": "QLN1083BD"}, {"status": "affected", "version": "QLN1086BD"}, {"status": "affected", "version": "QMB715"}, {"status": "affected", "version": "QMP1000"}, {"status": "affected", "version": "QPA1083BD"}, {"status": "affected", "version": "QPA1086BD"}, {"status": "affected", "version": "QRB5165N"}, {"status": "affected", "version": "QRU1032"}, {"status": "affected", "version": "Qualcomm Dragonwing QRU100 Platform"}, {"status": "affected", "version": "Qualcomm Dragonwing X100 Accelerator Card"}, {"status": "affected", "version": "Qualcomm Video Collaboration VC1 Platform"}, {"status": "affected", "version": "Qualcomm Video Collaboration VC3 Platform"}, {"status": "affected", "version": "Qualcomm Video Collaboration VC5 Platform"}, {"status": "affected", "version": "QXM1083"}, {"status": "affected", "version": "QXM1086"}, {"status": "affected", "version": "QXM1093"}, {"status": "affected", "version": "QXM1094"}, {"status": "affected", "version": "QXM1095"}, {"status": "affected", "version": "QXM1096"}, {"status": "affected", "version": "Robotics RB5 Platform"}, {"status": "affected", "version": "SA4150P"}, {"status": "affected", "version": "SA510M"}, {"status": "affected", "version": "SA6145P"}, {"status": "affected", "version": "SA6150P"}, {"status": "affected", "version": "SA6155P"}, {"status": "affected", "version": "SA7255P"}, {"status": "affected", "version": "SA7775P"}, {"status": "affected", "version": "SA8145P"}, {"status": "affected", "version": "SA8150P"}, {"status": "affected", "version": "SA8155P"}, {"status": "affected", "version": "SA8195P"}, {"status": "affected", "version": "SA8255P"}, {"status": "affected", "version": "SA8295P"}, {"status": "affected", "version": "SA8620P"}, {"status": "affected", "version": "SA8770P"}, {"status": "affected", "version": "SA9000P"}, {"status": "affected", "version": "SAR1165P"}, {"status": "affected", "version": "SD662"}, {"status": "affected", "version": "SD865 5G"}, {"status": "affected", "version": "SDA660"}, {"status": "affected", "version": "SDR753"}, {"status": "affected", "version": "SDX81"}, {"status": "affected", "version": "SM6225P"}, {"status": "affected", "version": "SM6370"}, {"status": "affected", "version": "SM8550P"}, {"status": "affected", "version": "SM8750P"}, {"status": "affected", "version": "Snapdragon 4 Gen 1 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 460 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 480 5G Mobile Platform"}, {"status": "affected", "version": "Snapdragon 480+ 5G Mobile Platform"}, {"status": "affected", "version": "Snapdragon 660 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 662 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 680 4G Mobile Platform"}, {"status": "affected", "version": "Snapdragon 685 4G Mobile Platform"}, {"status": "affected", "version": "Snapdragon 695 5G Mobile Platform"}, {"status": "affected", "version": "Snapdragon 7 Gen 4 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 8 Elite"}, {"status": "affected", "version": "Snapdragon 8 Elite Gen 5"}, {"status": "affected", "version": "Snapdragon 8 Gen 2 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 8 Gen 3 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 8+ Gen 2 Mobile Platform"}, {"status": "affected", "version": "Snapdragon AR1 Gen 1 Platform"}, {"status": "affected", "version": "Snapdragon AR1+ Gen 1 Platform"}, {"status": "affected", "version": "Snapdragon Auto 5G Modem-RF Gen 2"}, {"status": "affected", "version": "Snapdragon W5+ Gen 1 Wearable Platform"}, {"status": "affected", "version": "Snapdragon X32 5G Modem-RF System"}, {"status": "affected", "version": "Snapdragon X35 5G Modem-RF System"}, {"status": "affected", "version": "Snapdragon X72 5G Modem-RF System"}, {"status": "affected", "version": "Snapdragon X75 5G Modem-RF System"}, {"status": "affected", "version": "Snapdragon XR2 5G Platform"}, {"status": "affected", "version": "Snapdragon XR2+ Gen 1 Platform"}, {"status": "affected", "version": "Snapdragon Wear Elite platform"}, {"status": "affected", "version": "SRV1H"}, {"status": "affected", "version": "SRV1L"}, {"status": "affected", "version": "SRV1M"}, {"status": "affected", "version": "SSG2115P"}, {"status": "affected", "version": "SSG2125P"}, {"status": "affected", "version": "SW5100"}, {"status": "affected", "version": "SW5100P"}, {"status": "affected", "version": "SXR1230P"}, {"status": "affected", "version": "SXR2330P"}, {"status": "affected", "version": "SXR2350P"}, {"status": "affected", "version": "Themisto"}, {"status": "affected", "version": "WCD9335"}, {"status": "affected", "version": "WCD9340"}, {"status": "affected", "version": "WCD9341"}, {"status": "affected", "version": "WCD9370"}, {"status": "affected", "version": "WCD9375"}, {"status": "affected", "version": "WCD9378"}, {"status": "affected", "version": "WCD9380"}, {"status": "affected", "version": "WCD9385"}, {"status": "affected", "version": "WCD9390"}, {"status": "affected", "version": "WCD9395"}, {"status": "affected", "version": "WCN3910"}, {"status": "affected", "version": "WCN3950"}, {"status": "affected", "version": "WCN3980"}, {"status": "affected", "version": "WCN3988"}, {"status": "affected", "version": "WCN3990"}, {"status": "affected", "version": "WCN6450"}, {"status": "affected", "version": "WCN6755"}, {"status": "affected", "version": "WCN7860"}, {"status": "affected", "version": "WCN7861"}, {"status": "affected", "version": "WCN7880"}, {"status": "affected", "version": "WCN7881"}, {"status": "affected", "version": "WSA8810"}, {"status": "affected", "version": "WSA8815"}, {"status": "affected", "version": "WSA8830"}, {"status": "affected", "version": "WSA8832"}, {"status": "affected", "version": "WSA8835"}, {"status": "affected", "version": "WSA8840"}, {"status": "affected", "version": "WSA8845"}, {"status": "affected", "version": "WSA8845H"}, {"status": "affected", "version": "X1E80100"}, {"status": "affected", "version": "XRV7209"}, {"status": "affected", "version": "XRV9209"}], "platforms": ["Snapdragon Auto", "Snapdragon Compute", "Snapdragon Consumer IOT", "Snapdragon Industrial IOT", "Snapdragon Mobile", "Snapdragon WBC", "Snapdragon Wearables"], "defaultStatus": "unaffected"}]}], "published": "2026-08-04T16:16:25.183", "references": [{"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-bulletin.html", "source": "product-security@qualcomm.com"}], "vulnStatus": "Received", "weaknesses": [{"type": "Secondary", "source": "product-security@qualcomm.com", "description": [{"lang": "en", "value": "CWE-1286"}]}], "descriptions": [{"lang": "en", "value": "Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration."}], "lastModified": "2026-08-04T17:16:53.797", "sourceIdentifier": "product-security@qualcomm.com"}