CVE-2026-25271

Summary

Memory Corruption when processing asynchronous input parameters due to improper handling of modified values between check and use.

Affected Software

VendorProductVersion RangeStatus
Qualcomm, Inc.SnapdragonCologneaffected
Qualcomm, Inc.SnapdragonFastConnect 6900affected
Qualcomm, Inc.SnapdragonFastConnect 7800affected
Qualcomm, Inc.SnapdragonIQX5121affected
Qualcomm, Inc.SnapdragonIQX7181affected
Qualcomm, Inc.SnapdragonQCA0000affected
Qualcomm, Inc.SnapdragonSC8380XPaffected
Qualcomm, Inc.SnapdragonWCD9378Caffected
Qualcomm, Inc.SnapdragonWCD9380affected
Qualcomm, Inc.SnapdragonWCD9385affected
Qualcomm, Inc.SnapdragonWSA8840affected
Qualcomm, Inc.SnapdragonWSA8845affected
Qualcomm, Inc.SnapdragonWSA8845Haffected
Qualcomm, Inc.SnapdragonX2000077affected
Qualcomm, Inc.SnapdragonX2000086affected
Qualcomm, Inc.SnapdragonX2000090affected
Qualcomm, Inc.SnapdragonX2000092affected
Qualcomm, Inc.SnapdragonX2000094affected
Qualcomm, Inc.SnapdragonXG101002affected
Qualcomm, Inc.SnapdragonXG101032affected
Qualcomm, Inc.SnapdragonXG101039affected

Weaknesses

  • CWE-367: CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References