Back to CVE records
High 7.1Published Oct 6, 2026
CVE-2026-25302Improper Verification of Cryptographic Signature in Boot
Updated under an hour ago ()
Does this affect you?
It affects Qualcomm, Inc. Snapdragon and 59 other products. Add what you run to find out whether that includes you.
EPSS puts the chance of exploitation in the next 30 days at 0.06%, higher than 0% of scored CVEs.
Do this next
Start free and add your stack
Free account, 1 product
Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.
- CVSS
- 7.1 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
- Weakness (CWE)
- CWE-347
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- 0.06% (percentile 0)
- Assigned by
- qualcomm
- NVD analysis
- Analyzed
- Record last updated
- Oct 6, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Qualcomm, Inc. Snapdragon qualcomm:snapdragon (from the name) | 5G Fixed Wireless Access Platform; AR8035; Cologne; CQ7790; CQ8725S; CQ8750M; CSRA6620; CSRA6640; and 193 more ranges | CNA record |
qualcomm xrv9209_firmware qualcomm:xrv9209_firmware | all versions | NVD |
qualcomm snapdragon_g1_gen_2_gaming_platform_firmware qualcomm:snapdragon_g1_gen_2_gaming_platform_firmware | all versions | NVD |
qualcomm ar8035_firmware qualcomm:ar8035_firmware | all versions | NVD |
qualcomm cologne_firmware qualcomm:cologne_firmware | all versions | NVD |
qualcomm cq2390m_firmware qualcomm:cq2390m_firmware | all versions | NVD |
qualcomm qmp2001_firmware qualcomm:qmp2001_firmware | all versions | NVD |
qualcomm qmx82l_firmware qualcomm:qmx82l_firmware | all versions | NVD |
qualcomm qmx85l_firmware qualcomm:qmx85l_firmware | all versions | NVD |
qualcomm qna715_firmware qualcomm:qna715_firmware | all versions | NVD |
qualcomm qpa1083bd_firmware qualcomm:qpa1083bd_firmware | all versions | NVD |
qualcomm qpa1086bd_firmware qualcomm:qpa1086bd_firmware | all versions | NVD |
qualcomm qru1032_firmware qualcomm:qru1032_firmware | all versions | NVD |
qualcomm qualcomm_dragonwing_qru100_platform_firmware qualcomm:qualcomm_dragonwing_qru100_platform_firmware | all versions | NVD |
qualcomm qualcomm_dragonwing_x100_accelerator_card_firmware qualcomm:qualcomm_dragonwing_x100_accelerator_card_firmware | all versions | NVD |
qualcomm video_collaboration_vc3_platform_firmware qualcomm:video_collaboration_vc3_platform_firmware | all versions | NVD |
qualcomm video_collaboration_vc5_platform_firmware qualcomm:video_collaboration_vc5_platform_firmware | all versions | NVD |
qualcomm qxm1083_firmware qualcomm:qxm1083_firmware | all versions | NVD |
qualcomm qxm1086_firmware qualcomm:qxm1086_firmware | all versions | NVD |
qualcomm qxm1093_firmware qualcomm:qxm1093_firmware | all versions | NVD |
qualcomm qxm1094_firmware qualcomm:qxm1094_firmware | all versions | NVD |
qualcomm qxm1095_firmware qualcomm:qxm1095_firmware | all versions | NVD |
qualcomm qxm1096_firmware qualcomm:qxm1096_firmware | all versions | NVD |
qualcomm robotics_rb2_platform_firmware qualcomm:robotics_rb2_platform_firmware | all versions | NVD |
qualcomm robotics_rb5_platform_firmware qualcomm:robotics_rb5_platform_firmware | all versions | NVD |
qualcomm sa510m_firmware qualcomm:sa510m_firmware | all versions | NVD |
qualcomm sa7255p_firmware qualcomm:sa7255p_firmware | all versions | NVD |
qualcomm sa7775p_firmware qualcomm:sa7775p_firmware | all versions | NVD |
qualcomm sa8255p_firmware qualcomm:sa8255p_firmware | all versions | NVD |
qualcomm sa8295p_firmware qualcomm:sa8295p_firmware | all versions | NVD |
qualcomm sa8540p_firmware qualcomm:sa8540p_firmware | all versions | NVD |
qualcomm sa8620p_firmware qualcomm:sa8620p_firmware | all versions | NVD |
qualcomm sa8770p_firmware qualcomm:sa8770p_firmware | all versions | NVD |
qualcomm sa9000p_firmware qualcomm:sa9000p_firmware | all versions | NVD |
qualcomm sar1165p_firmware qualcomm:sar1165p_firmware | all versions | NVD |
qualcomm sar2130p_firmware qualcomm:sar2130p_firmware | all versions | NVD |
qualcomm sc8380xp_firmware qualcomm:sc8380xp_firmware | all versions | NVD |
qualcomm snapdragon_8_gen1_5g_firmware qualcomm:snapdragon_8_gen1_5g_firmware | all versions | NVD |
qualcomm snapdragon_662_mobile_platform_firmware qualcomm:snapdragon_662_mobile_platform_firmware | all versions | NVD |
qualcomm snapdragon_865_5g_mobile_platform_firmware qualcomm:snapdragon_865_5g_mobile_platform_firmware | all versions | NVD |
qualcomm sdr753_firmware qualcomm:sdr753_firmware | all versions | NVD |
qualcomm sdx61_firmware qualcomm:sdx61_firmware | all versions | NVD |
qualcomm sdx71m_firmware qualcomm:sdx71m_firmware | all versions | NVD |
qualcomm sdx81_firmware qualcomm:sdx81_firmware | all versions | NVD |
qualcomm sm4850_firmware qualcomm:sm4850_firmware | all versions | NVD |
qualcomm sm4850p_firmware qualcomm:sm4850p_firmware | all versions | NVD |
qualcomm wsa8845_firmware qualcomm:wsa8845_firmware | all versions | NVD |
qualcomm wsa8845h_firmware qualcomm:wsa8845h_firmware | all versions | NVD |
qualcomm wsa8850_firmware qualcomm:wsa8850_firmware | all versions | NVD |
qualcomm wsa8850w_firmware qualcomm:wsa8850w_firmware | all versions | NVD |
qualcomm wsa8855c_firmware qualcomm:wsa8855c_firmware | all versions | NVD |
qualcomm x1e80100_firmware qualcomm:x1e80100_firmware | all versions | NVD |
qualcomm xrv7209_firmware qualcomm:xrv7209_firmware | all versions | NVD |
qualcomm cq2390s_firmware qualcomm:cq2390s_firmware | all versions | NVD |
qualcomm cq7790_firmware qualcomm:cq7790_firmware | all versions | NVD |
qualcomm cq7790m_firmware qualcomm:cq7790m_firmware | all versions | NVD |
qualcomm cq8725s_firmware qualcomm:cq8725s_firmware | all versions | NVD |
qualcomm cq8750m_firmware qualcomm:cq8750m_firmware | all versions | NVD |
qualcomm cq8845s_firmware qualcomm:cq8845s_firmware | all versions | NVD |
qualcomm cq8850ns_firmware qualcomm:cq8850ns_firmware | all versions | NVD |
References
- https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2026-bulletin.htmlvendor-advisory
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.