CVE-2026-25281

Summary

Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation.

Affected Software

VendorProductVersion RangeStatus
Qualcomm, Inc.SnapdragonCologneaffected
Qualcomm, Inc.SnapdragonFastConnect 7800affected
Qualcomm, Inc.SnapdragonSnapdragon X2 Eliteaffected
Qualcomm, Inc.SnapdragonWCD9378Caffected
Qualcomm, Inc.SnapdragonWSA8840affected
Qualcomm, Inc.SnapdragonWSA8845affected
Qualcomm, Inc.SnapdragonWSA8845Haffected

Weaknesses

  • CWE-770: CWE-770: Allocation of Resources Without Limits or Throttling

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References