Back to CVE records
High 7.8Published Sep 17, 2026
CVE-2026-25278Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive Software platform based on QNX
Updated under an hour ago ()
Does this affect you?
It affects Qualcomm, Inc. Snapdragon and 29 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying.
- CVSS
- 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- CWE-367
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- qualcomm
- NVD analysis
- Analyzed
- Record last updated
- Sep 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Qualcomm, Inc. Snapdragon qualcomm:snapdragon (from the name) | LeMans_AU_LGIT; LeMansAU; QAM8255P; QAM8295P; QAM8620P; QAMSRV1H; QAMSRV1M; QCA6574AU; and 21 more ranges | CNA record |
qualcomm lemans_au_lgit_firmware qualcomm:lemans_au_lgit_firmware | all versions | NVD |
qualcomm lemansau_firmware qualcomm:lemansau_firmware | all versions | NVD |
qualcomm qam8255p_firmware qualcomm:qam8255p_firmware | all versions | NVD |
qualcomm qam8295p_firmware qualcomm:qam8295p_firmware | all versions | NVD |
qualcomm qam8620p_firmware qualcomm:qam8620p_firmware | all versions | NVD |
qualcomm qamsrv1h_firmware qualcomm:qamsrv1h_firmware | all versions | NVD |
qualcomm qamsrv1m_firmware qualcomm:qamsrv1m_firmware | all versions | NVD |
qualcomm qca6574au_firmware qualcomm:qca6574au_firmware | all versions | NVD |
qualcomm qca6595_firmware qualcomm:qca6595_firmware | all versions | NVD |
qualcomm qca6595au_firmware qualcomm:qca6595au_firmware | all versions | NVD |
qualcomm qca6688aq_firmware qualcomm:qca6688aq_firmware | all versions | NVD |
qualcomm qca6696_firmware qualcomm:qca6696_firmware | all versions | NVD |
qualcomm qca6698aq_firmware qualcomm:qca6698aq_firmware | all versions | NVD |
qualcomm qca6797aq_firmware qualcomm:qca6797aq_firmware | all versions | NVD |
qualcomm qca8695au_firmware qualcomm:qca8695au_firmware | all versions | NVD |
qualcomm sa6155p_firmware qualcomm:sa6155p_firmware | all versions | NVD |
qualcomm sa7255p_firmware qualcomm:sa7255p_firmware | all versions | NVD |
qualcomm sa7775p_firmware qualcomm:sa7775p_firmware | all versions | NVD |
qualcomm sa8155p_firmware qualcomm:sa8155p_firmware | all versions | NVD |
qualcomm sa8195p_firmware qualcomm:sa8195p_firmware | all versions | NVD |
qualcomm sa8255p_firmware qualcomm:sa8255p_firmware | all versions | NVD |
qualcomm sa8295p_firmware qualcomm:sa8295p_firmware | all versions | NVD |
qualcomm sa8540p_firmware qualcomm:sa8540p_firmware | all versions | NVD |
qualcomm sa8620p_firmware qualcomm:sa8620p_firmware | all versions | NVD |
qualcomm sa8770p_firmware qualcomm:sa8770p_firmware | all versions | NVD |
qualcomm sa9000p_firmware qualcomm:sa9000p_firmware | all versions | NVD |
qualcomm srv1h_firmware qualcomm:srv1h_firmware | all versions | NVD |
qualcomm srv1l_firmware qualcomm:srv1l_firmware | all versions | NVD |
qualcomm srv1m_firmware qualcomm:srv1m_firmware | all versions | NVD |
References
- https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2026-bulletin.htmlvendor-advisory
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.