Back to CVE records
High 7.5Published Sep 17, 2026
CVE-2026-25275Buffer Over-read in WLAN Firmware
Updated under an hour ago ()
Does this affect you?
It affects Qualcomm, Inc. Snapdragon and 59 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
Transient DOS when processing authentication frames with invalid FILS information element header lengths.
- CVSS
- 7.5 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- CWE-126
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- qualcomm
- NVD analysis
- Analyzed
- Record last updated
- Sep 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Qualcomm, Inc. Snapdragon qualcomm:snapdragon (from the name) | Snapdragon G1 Gen 2 Gaming Platform; 5G Fixed Wireless Access Platform; AQT1000; AR8031; AR8035; C110100; Cologne; Congo; and 193 more ranges | CNA record |
qualcomm q-7790_firmware qualcomm:q-7790_firmware | all versions | NVD |
qualcomm qam8255p_firmware qualcomm:qam8255p_firmware | all versions | NVD |
qualcomm qam8295p_firmware qualcomm:qam8295p_firmware | all versions | NVD |
qualcomm qamsrv1h_firmware qualcomm:qamsrv1h_firmware | all versions | NVD |
qualcomm qamsrv1m_firmware qualcomm:qamsrv1m_firmware | all versions | NVD |
qualcomm qca0000_firmware qualcomm:qca0000_firmware | all versions | NVD |
qualcomm qca2062_firmware qualcomm:qca2062_firmware | all versions | NVD |
qualcomm qca2064_firmware qualcomm:qca2064_firmware | all versions | NVD |
qualcomm qca2065_firmware qualcomm:qca2065_firmware | all versions | NVD |
qualcomm qca2066_firmware qualcomm:qca2066_firmware | all versions | NVD |
qualcomm qca4024_firmware qualcomm:qca4024_firmware | all versions | NVD |
qualcomm qca6391_firmware qualcomm:qca6391_firmware | all versions | NVD |
qualcomm qca6420_firmware qualcomm:qca6420_firmware | all versions | NVD |
qualcomm qca6428_firmware qualcomm:qca6428_firmware | all versions | NVD |
qualcomm qca6430_firmware qualcomm:qca6430_firmware | all versions | NVD |
qualcomm qca6438_firmware qualcomm:qca6438_firmware | all versions | NVD |
qualcomm qca6554a_firmware qualcomm:qca6554a_firmware | all versions | NVD |
qualcomm qca6564au_firmware qualcomm:qca6564au_firmware | all versions | NVD |
qualcomm qca6574_firmware qualcomm:qca6574_firmware | all versions | NVD |
qualcomm qca6574a_firmware qualcomm:qca6574a_firmware | all versions | NVD |
qualcomm qca6574au_firmware qualcomm:qca6574au_firmware | all versions | NVD |
qualcomm qca6584au_firmware qualcomm:qca6584au_firmware | all versions | NVD |
qualcomm qca6595_firmware qualcomm:qca6595_firmware | all versions | NVD |
qualcomm qca6595au_firmware qualcomm:qca6595au_firmware | all versions | NVD |
qualcomm qca6678aq_firmware qualcomm:qca6678aq_firmware | all versions | NVD |
qualcomm qca6688aq_firmware qualcomm:qca6688aq_firmware | all versions | NVD |
qualcomm qca6696_firmware qualcomm:qca6696_firmware | all versions | NVD |
qualcomm qca6698aq_firmware qualcomm:qca6698aq_firmware | all versions | NVD |
qualcomm qca6698au_firmware qualcomm:qca6698au_firmware | all versions | NVD |
qualcomm qca6777aq_firmware qualcomm:qca6777aq_firmware | all versions | NVD |
qualcomm qca6787aq_firmware qualcomm:qca6787aq_firmware | all versions | NVD |
qualcomm qca6797aq_firmware qualcomm:qca6797aq_firmware | all versions | NVD |
qualcomm qca8072_firmware qualcomm:qca8072_firmware | all versions | NVD |
qualcomm qca8075_firmware qualcomm:qca8075_firmware | all versions | NVD |
qualcomm qca8080_firmware qualcomm:qca8080_firmware | all versions | NVD |
qualcomm qca8081_firmware qualcomm:qca8081_firmware | all versions | NVD |
qualcomm qca8082_firmware qualcomm:qca8082_firmware | all versions | NVD |
qualcomm qca8084_firmware qualcomm:qca8084_firmware | all versions | NVD |
qualcomm qca8085_firmware qualcomm:qca8085_firmware | all versions | NVD |
qualcomm qca8337_firmware qualcomm:qca8337_firmware | all versions | NVD |
qualcomm sm7550_firmware qualcomm:sm7550_firmware | all versions | NVD |
qualcomm sm7550p_firmware qualcomm:sm7550p_firmware | all versions | NVD |
qualcomm sm7635p_firmware qualcomm:sm7635p_firmware | all versions | NVD |
qualcomm sm7675_firmware qualcomm:sm7675_firmware | all versions | NVD |
qualcomm sm7675p_firmware qualcomm:sm7675p_firmware | all versions | NVD |
qualcomm sm7750p_firmware qualcomm:sm7750p_firmware | all versions | NVD |
qualcomm sm8475p_firmware qualcomm:sm8475p_firmware | all versions | NVD |
qualcomm sm8550p_firmware qualcomm:sm8550p_firmware | all versions | NVD |
qualcomm sm8635_firmware qualcomm:sm8635_firmware | all versions | NVD |
qualcomm sm8635p_firmware qualcomm:sm8635p_firmware | all versions | NVD |
qualcomm sm8650q_firmware qualcomm:sm8650q_firmware | all versions | NVD |
qualcomm sm8735p_firmware qualcomm:sm8735p_firmware | all versions | NVD |
qualcomm sm8750p_firmware qualcomm:sm8750p_firmware | all versions | NVD |
qualcomm sm8845p_firmware qualcomm:sm8845p_firmware | all versions | NVD |
qualcomm sm8950_firmware qualcomm:sm8950_firmware | all versions | NVD |
qualcomm sm8950p_firmware qualcomm:sm8950p_firmware | all versions | NVD |
qualcomm sm8975_firmware qualcomm:sm8975_firmware | all versions | NVD |
qualcomm sm8975p_firmware qualcomm:sm8975p_firmware | all versions | NVD |
qualcomm smart_audio_400_platform_firmware qualcomm:smart_audio_400_platform_firmware | all versions | NVD |
References
- https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2026-bulletin.htmlvendor-advisory
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.