CVE-2026-25262

Memory corruption while processing a crafted ELF file in the Primary Bootloader.

Score

CVSS 3.1 6.9 Medium

Status

Analyzed - product-security@qualcomm.com

Published

2026-09-22

Last modified

2026-10-06

Weaknesses

CWE-123

Affected products

• Mdm9207 Firmware (Qualcomm)
• Mdm9645 Firmware (Qualcomm)
• Mdm9655 Firmware (Qualcomm)
• Mdm9665 Firmware (Qualcomm)
• Msm8909 Firmware (Qualcomm)
• Msm8916 Firmware (Qualcomm)
• Msm8952 Firmware (Qualcomm)
• Sdx50 Firmware (Qualcomm)
• Snapdragon (Qualcomm Inc.)

References

• https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2026-bulletin.html