Search/CVE-2026-25292
● CVE — High

CVE-2026-25292

VendorqualcommProductsm8550p firmware, snapdragon 4 gen 2 mobile platform firmware, snapdragon 680 4g mobile platform firmware, sm7435 firmware, snapdragon 480 5g mobile platform firmware, snapdragon 4 gen 1 mobile platform firmware, snapdragon 662 mobile platform firmware, snapdragon 6 gen 1 mobile platform firmware, sm7525 firmware, sm7550 firmware, sm8750p firmware, snapdragon 460 mobile platform firmware, sm7635p firmware, smart audio 400 platform firmware, sm7550p firmware, sm6225p firmware, snapdragon 6 gen 3 mobile platform firmware, sm6850 firmware, sm8845p firmware, sm7435p firmware, sm8735p firmware, sm6450p firmware, sm6475p firmware, sm6475q firmwareDiscoveredAug 4, 2026UpdatedOct 23, 2026

Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration.

CVSS v3.1
7.6 HIGH
EPSS
0.15%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Sep 25, 2026
▲ 0.05pp
0.10% → 0.15% over 2 tracked changes
CVSS v3.1 Detail
Attack VectorPHYSICAL
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Connections
25 relationships
Timeline
disclosure → media coverage
Aug 4, 2026
Disclosure — published as a CVE record. · last revised by NVD Oct 23, 2026