CVE-2026-25289
9.6
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Summary
Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Qualcomm, Inc. | Snapdragon | AR8035 | affected |
| Qualcomm, Inc. | Snapdragon | Cologne | affected |
| Qualcomm, Inc. | Snapdragon | CQ7790 | affected |
| Qualcomm, Inc. | Snapdragon | CQ8725S | affected |
| Qualcomm, Inc. | Snapdragon | CQ8750M | affected |
| Qualcomm, Inc. | Snapdragon | FastConnect 6200 | affected |
| Qualcomm, Inc. | Snapdragon | FastConnect 6700 | affected |
| Qualcomm, Inc. | Snapdragon | FastConnect 6800 | affected |
| Qualcomm, Inc. | Snapdragon | FastConnect 6900 | affected |
| Qualcomm, Inc. | Snapdragon | FastConnect 7800 | affected |
| Qualcomm, Inc. | Snapdragon | FWA Gen 3 Ultra Platform | affected |
| Qualcomm, Inc. | Snapdragon | FWA Gen 5 Elite Platform | affected |
| Qualcomm, Inc. | Snapdragon | G2 Gen 1 | affected |
| Qualcomm, Inc. | Snapdragon | Immersive Home 3210 Platform | affected |
| Qualcomm, Inc. | Snapdragon | Immersive Home 326 Platform | affected |
| Qualcomm, Inc. | Snapdragon | IPQ5300 | affected |
| Qualcomm, Inc. | Snapdragon | IPQ5302 | affected |
| Qualcomm, Inc. | Snapdragon | IPQ5312 | affected |
| Qualcomm, Inc. | Snapdragon | IPQ5332 | affected |
| Qualcomm, Inc. | Snapdragon | IPQ9554 | affected |
| Qualcomm, Inc. | Snapdragon | IPQ9570 | affected |
| Qualcomm, Inc. | Snapdragon | IPQ9574 | affected |
| Qualcomm, Inc. | Snapdragon | IQ10 Series | affected |
| Qualcomm, Inc. | Snapdragon | IQX5121 | affected |
| Qualcomm, Inc. | Snapdragon | IQX7181 | affected |
| Qualcomm, Inc. | Snapdragon | Kobuk | affected |
| Qualcomm, Inc. | Snapdragon | LeMans_AU_LGIT | affected |
| Qualcomm, Inc. | Snapdragon | LeMansAU | affected |
| Qualcomm, Inc. | Snapdragon | Milos | affected |
| Qualcomm, Inc. | Snapdragon | Milos_IOT | affected |
| Qualcomm, Inc. | Snapdragon | Networking Pro 1210 Platform | affected |
| Qualcomm, Inc. | Snapdragon | Networking Pro 1610 Platform | affected |
| Qualcomm, Inc. | Snapdragon | Networking Pro 610 Platform | affected |
| Qualcomm, Inc. | Snapdragon | Networking Pro 810 Platform | affected |
| Qualcomm, Inc. | Snapdragon | Orne | affected |
| Qualcomm, Inc. | Snapdragon | Palawan25 | affected |
| Qualcomm, Inc. | Snapdragon | Pandeiro | affected |
| Qualcomm, Inc. | Snapdragon | QAM8255P | affected |
| Qualcomm, Inc. | Snapdragon | QAM8397P | affected |
| Qualcomm, Inc. | Snapdragon | QAM8797P | affected |
| Qualcomm, Inc. | Snapdragon | QAMSRV1H | affected |
| Qualcomm, Inc. | Snapdragon | QAMSRV1M | affected |
| Qualcomm, Inc. | Snapdragon | QCA0000 | affected |
| Qualcomm, Inc. | Snapdragon | QCA6391 | affected |
| Qualcomm, Inc. | Snapdragon | QCA6426 | affected |
| Qualcomm, Inc. | Snapdragon | QCA6436 | affected |
| Qualcomm, Inc. | Snapdragon | QCA6554A | affected |
| Qualcomm, Inc. | Snapdragon | QCA6564AU | affected |
| Qualcomm, Inc. | Snapdragon | QCA6574 | affected |
| Qualcomm, Inc. | Snapdragon | QCA6574A | affected |
| Qualcomm, Inc. | Snapdragon | QCA6574AU | affected |
| Qualcomm, Inc. | Snapdragon | QCA6584AU | affected |
| Qualcomm, Inc. | Snapdragon | QCA6595 | affected |
| Qualcomm, Inc. | Snapdragon | QCA6595AU | affected |
| Qualcomm, Inc. | Snapdragon | QCA6678AQ | affected |
| Qualcomm, Inc. | Snapdragon | QCA6688AQ | affected |
| Qualcomm, Inc. | Snapdragon | QCA6696 | affected |
| Qualcomm, Inc. | Snapdragon | QCA6698AQ | affected |
| Qualcomm, Inc. | Snapdragon | QCA6698AU | affected |
| Qualcomm, Inc. | Snapdragon | QCA6777AQ | affected |
| Qualcomm, Inc. | Snapdragon | QCA6787AQ | affected |
| Qualcomm, Inc. | Snapdragon | QCA6797AQ | affected |
| Qualcomm, Inc. | Snapdragon | QCA8075 | affected |
| Qualcomm, Inc. | Snapdragon | QCA8081 | affected |
| Qualcomm, Inc. | Snapdragon | QCA8337 | affected |
| Qualcomm, Inc. | Snapdragon | QCA8386 | affected |
| Qualcomm, Inc. | Snapdragon | QCA8695AU | affected |
| Qualcomm, Inc. | Snapdragon | QCC2073 | affected |
| Qualcomm, Inc. | Snapdragon | QCC2076 | affected |
| Qualcomm, Inc. | Snapdragon | QCC710 | affected |
| Qualcomm, Inc. | Snapdragon | QCF8000 | affected |
| Qualcomm, Inc. | Snapdragon | QCF8001 | affected |
| Qualcomm, Inc. | Snapdragon | QCM8550 | affected |
| Qualcomm, Inc. | Snapdragon | QCM8838 | affected |
| Qualcomm, Inc. | Snapdragon | QCN5124 | affected |
| Qualcomm, Inc. | Snapdragon | QCN6224 | affected |
| Qualcomm, Inc. | Snapdragon | QCN6274 | affected |
| Qualcomm, Inc. | Snapdragon | QCN6402 | affected |
| Qualcomm, Inc. | Snapdragon | QCN6412 | affected |
| Qualcomm, Inc. | Snapdragon | QCN6422 | affected |
| Qualcomm, Inc. | Snapdragon | QCN6432 | affected |
| Qualcomm, Inc. | Snapdragon | QCN9011 | affected |
| Qualcomm, Inc. | Snapdragon | QCN9012 | affected |
| Qualcomm, Inc. | Snapdragon | QCN9274 | affected |
| Qualcomm, Inc. | Snapdragon | QCS6690 | affected |
| Qualcomm, Inc. | Snapdragon | QCS8550 | affected |
| Qualcomm, Inc. | Snapdragon | QFW7114 | affected |
| Qualcomm, Inc. | Snapdragon | QFW7124 | affected |
| Qualcomm, Inc. | Snapdragon | QLN1083BD | affected |
| Qualcomm, Inc. | Snapdragon | QLN1086BD | affected |
| Qualcomm, Inc. | Snapdragon | QMB715 | affected |
| Qualcomm, Inc. | Snapdragon | QMP1000 | affected |
| Qualcomm, Inc. | Snapdragon | QPA1083BD | affected |
| Qualcomm, Inc. | Snapdragon | QPA1086BD | affected |
| Qualcomm, Inc. | Snapdragon | QXM1083 | affected |
| Qualcomm, Inc. | Snapdragon | QXM1086 | affected |
| Qualcomm, Inc. | Snapdragon | QXM1093 | affected |
| Qualcomm, Inc. | Snapdragon | QXM1094 | affected |
| Qualcomm, Inc. | Snapdragon | QXM1095 | affected |
| Qualcomm, Inc. | Snapdragon | QXM1096 | affected |
| Qualcomm, Inc. | Snapdragon | SA7255P | affected |
| Qualcomm, Inc. | Snapdragon | SA7775P | affected |
| Qualcomm, Inc. | Snapdragon | SA8255P | affected |
| Qualcomm, Inc. | Snapdragon | SA8620P | affected |
| Qualcomm, Inc. | Snapdragon | SA8770P | affected |
| Qualcomm, Inc. | Snapdragon | SA9000P | affected |
| Qualcomm, Inc. | Snapdragon | SAR1165P | affected |
| Qualcomm, Inc. | Snapdragon | SAR2130P | affected |
| Qualcomm, Inc. | Snapdragon | SC8380XP | affected |
| Qualcomm, Inc. | Snapdragon | SD 8 Gen1 5G | affected |
| Qualcomm, Inc. | Snapdragon | SD865 5G | affected |
| Qualcomm, Inc. | Snapdragon | SDR753 | affected |
| Qualcomm, Inc. | Snapdragon | SDX81 | affected |
| Qualcomm, Inc. | Snapdragon | SM6650P | affected |
| Qualcomm, Inc. | Snapdragon | SM7635P | affected |
| Qualcomm, Inc. | Snapdragon | SM7675 | affected |
| Qualcomm, Inc. | Snapdragon | SM7675P | affected |
| Qualcomm, Inc. | Snapdragon | SM8550P | affected |
| Qualcomm, Inc. | Snapdragon | SM8635 | affected |
| Qualcomm, Inc. | Snapdragon | SM8635P | affected |
| Qualcomm, Inc. | Snapdragon | SM8650Q | affected |
| Qualcomm, Inc. | Snapdragon | SM8750P | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 6 Gen 4 Mobile Platform | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 7 Gen 4 Mobile Platform | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 7s Gen 3 Mobile Platform | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 8 Elite | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 8 Elite Gen 5 | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 8 Gen 1 Mobile Platform | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 8 Gen 2 Mobile Platform | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 8 Gen 3 Mobile Platform | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 8+ Gen 2 Mobile Platform | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 865 5G Mobile Platform | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 865+ 5G Mobile Platform | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 870 5G Mobile Platform | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon AR1 Gen 1 Platform | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon AR1+ Gen 1 Platform | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon Auto 5G Modem-RF Gen 2 | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon X72 5G Modem-RF System | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon X75 5G Modem-RF System | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon XR2 5G Platform | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon Wear Elite platform | affected |
| Qualcomm, Inc. | Snapdragon | SRV1H | affected |
| Qualcomm, Inc. | Snapdragon | SRV1M | affected |
| Qualcomm, Inc. | Snapdragon | SSG2115P | affected |
| Qualcomm, Inc. | Snapdragon | SSG2125P | affected |
| Qualcomm, Inc. | Snapdragon | SXR1230P | affected |
| Qualcomm, Inc. | Snapdragon | SXR2230P | affected |
| Qualcomm, Inc. | Snapdragon | SXR2250P | affected |
| Qualcomm, Inc. | Snapdragon | SXR2330P | affected |
| Qualcomm, Inc. | Snapdragon | SXR2350P | affected |
| Qualcomm, Inc. | Snapdragon | Themisto | affected |
| Qualcomm, Inc. | Snapdragon | WCD9340 | affected |
| Qualcomm, Inc. | Snapdragon | WCD9370 | affected |
| Qualcomm, Inc. | Snapdragon | WCD9375 | affected |
| Qualcomm, Inc. | Snapdragon | WCD9378 | affected |
| Qualcomm, Inc. | Snapdragon | WCD9378C | affected |
| Qualcomm, Inc. | Snapdragon | WCD9380 | affected |
| Qualcomm, Inc. | Snapdragon | WCD9385 | affected |
| Qualcomm, Inc. | Snapdragon | WCD9390 | affected |
| Qualcomm, Inc. | Snapdragon | WCD9395 | affected |
| Qualcomm, Inc. | Snapdragon | WCN3988 | affected |
| Qualcomm, Inc. | Snapdragon | WCN6450 | affected |
| Qualcomm, Inc. | Snapdragon | WCN6650 | affected |
| Qualcomm, Inc. | Snapdragon | WCN6740 | affected |
| Qualcomm, Inc. | Snapdragon | WCN6755 | affected |
| Qualcomm, Inc. | Snapdragon | WCN7860 | affected |
| Qualcomm, Inc. | Snapdragon | WCN7861 | affected |
| Qualcomm, Inc. | Snapdragon | WCN7880 | affected |
| Qualcomm, Inc. | Snapdragon | WCN7881 | affected |
| Qualcomm, Inc. | Snapdragon | WSA8810 | affected |
| Qualcomm, Inc. | Snapdragon | WSA8815 | affected |
| Qualcomm, Inc. | Snapdragon | WSA8830 | affected |
| Qualcomm, Inc. | Snapdragon | WSA8832 | affected |
| Qualcomm, Inc. | Snapdragon | WSA8835 | affected |
| Qualcomm, Inc. | Snapdragon | WSA8840 | affected |
| Qualcomm, Inc. | Snapdragon | WSA8845 | affected |
| Qualcomm, Inc. | Snapdragon | WSA8845H | affected |
| Qualcomm, Inc. | Snapdragon | X1E80100 | affected |
| Qualcomm, Inc. | Snapdragon | X2000077 | affected |
| Qualcomm, Inc. | Snapdragon | X2000086 | affected |
| Qualcomm, Inc. | Snapdragon | X2000090 | affected |
| Qualcomm, Inc. | Snapdragon | X2000092 | affected |
| Qualcomm, Inc. | Snapdragon | X2000094 | affected |
| Qualcomm, Inc. | Snapdragon | XG101002 | affected |
| Qualcomm, Inc. | Snapdragon | XG101032 | affected |
| Qualcomm, Inc. | Snapdragon | XG101039 | affected |
| Qualcomm, Inc. | Snapdragon | XRV7209 | affected |
| Qualcomm, Inc. | Snapdragon | XRV9209 | affected |
Weaknesses
- CWE-121: CWE-121 Stack-based Buffer Overflow
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: total
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.