TI-2026-20408 Aliases CVE-2026-25276 GHSA-c5pf-h876-qpm9

Improper Validation of Array Index in Secure Processor

LOW 39CWE-129Published 2026-06-01 · Updated 2026-06-03

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-129 and the CVSS impact.

Summary

Memory corruption while using Strongbox due to missing bounds check.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00075 0th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Qualcomm	Snapdragon	Snapdragon 8 Gen 2 Mobile Platform; Snapdragon 8+ Gen 2 Mobile Platform; Snapdragon 8 Gen 3 Mobile Platform; Snapdragon 8 Elite; Snapdragon 8 Elite Gen 5	—	No fix listed	CNA

Snapdragon VendorQualcomm Affected Snapdragon 8 Gen 2 Mobile Platform; Snapdragon 8+ Gen 2 Mobile Platform; Snapdragon 8 Gen 3 Mobile Platform; Snapdragon 8 Elite; Snapdragon 8 Elite Gen 5 Fixed in — No fix listed CNA

CPE configurations NVD · 114

CPE	Versions	Role	Vendor
cpe:2.3:o:qualcomm:cq8750m_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:cq8750m:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:fastconnect_6700_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:fastconnect_6700:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:fastconnect_6800_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:fastconnect_6800:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:fastconnect_6900:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:fastconnect_7800:-:::::::*	not specified by NVD	Running on	Qualcomm

cpe:2.3:o:qualcomm:cq8750m_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:cq8750m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:fastconnect_6700_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:fastconnect_6700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:fastconnect_6800_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:fastconnect_6800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:fastconnect_6900:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:fastconnect_7800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm

Show 104 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:o:qualcomm:g3x_gen_2_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:g3x_gen_2:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:pandeiro_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:pandeiro:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:qca6391_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:qca6391:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:qca6698au_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:qca6698au:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:qca6797aq_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:qca6797aq:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:qcm5430_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:qcm5430:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:qcm6490_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:qcm6490:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:qcm8838_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:qcm8838:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:qcn9011_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:qcn9011:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:qcn9012_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:qcn9012:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:qcs8550_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:qcs8550:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:video_collaboration_vc3_platform_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:video_collaboration_vc3_platform:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:sd865_5g_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:sd865_5g:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:sdr753_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:sdr753:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:sm8550p_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:sm8550p:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:sm8650q_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:sm8650q:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:sm8750p_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:sm8750p:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:snapdragon_460_mobile_platform_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:snapdragon_460_mobile_platform:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:snapdragon_662_mobile_platform_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:snapdragon_662_mobile_platform:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:snapdragon_8_elite_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:snapdragon_8_elite:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:snapdragon_8_elite_gen_5_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:snapdragon_8_elite_gen_5:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:snapdragon_8_gen_2_mobile_platform_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:snapdragon_8_gen_2_mobile_platform:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:snapdragon_8_gen_3_mobile_platform_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:snapdragon_8_gen_3_mobile_platform:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:snapdragon_8\+_gen_2_mobile_platform_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:snapdragon_8\+_gen_2_mobile_platform:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:snapdragon_865_5g_mobile_platform_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:snapdragon_865_5g_mobile_platform:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:snapdragon_865\+_5g_mobile_platform_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:snapdragon_865\+_5g_mobile_platform:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:snapdragon_870_5g_mobile_platform_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:snapdragon_870_5g_mobile_platform:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:snapdragon_ar1_gen_1_platform_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:snapdragon_ar1_gen_1_platform:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:snapdragon_x55_5g_modem-rf_system_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:snapdragon_x55_5g_modem-rf_system:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:snapdragon_xr2_5g_platform_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:snapdragon_xr2_5g_platform:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:snapdragon_xr2\+_gen_1_platform_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:snapdragon_xr2\+_gen_1_platform:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:wcd9370_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:wcd9370:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:wcd9375_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:wcd9375:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:wcd9380_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:wcd9380:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:wcd9385_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:wcd9385:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:wcd9390_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:wcd9390:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:wcd9395_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:wcd9395:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:wcn3950_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:wcn3950:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:wcn3988_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:wcn3988:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:wcn7760_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:wcn7760:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:wcn7860_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:wcn7860:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:wcn7861_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:wcn7861:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:wcn7880_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:wcn7880:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:wcn7881_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:wcn7881:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:wsa8810_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:wsa8810:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:wsa8815_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:wsa8815:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:wsa8830_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:wsa8830:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:wsa8832_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:wsa8832:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:wsa8835_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:wsa8835:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:wsa8840_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:wsa8840:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:wsa8845_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:wsa8845:-:::::::*	not specified by NVD	Running on	Qualcomm
cpe:2.3:o:qualcomm:wsa8845h_firmware:-:::::::*	not specified by NVD	Vulnerable	Qualcomm
cpe:2.3:h:qualcomm:wsa8845h:-:::::::*	not specified by NVD	Running on	Qualcomm

cpe:2.3:o:qualcomm:g3x_gen_2_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:g3x_gen_2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:pandeiro_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:pandeiro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:qca6391:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:qca6698au_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:qca6698au:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:qca6797aq_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:qca6797aq:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:qcm5430_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:qcm5430:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:qcm6490_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:qcm6490:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:qcm8838_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:qcm8838:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:qcn9011_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:qcn9011:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:qcn9012_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:qcn9012:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:qcs8550_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:qcs8550:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:video_collaboration_vc3_platform_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:video_collaboration_vc3_platform:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:sd865_5g_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:sd865_5g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:sdr753_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:sdr753:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:sm8550p_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:sm8550p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:sm8650q_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:sm8650q:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:sm8750p_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:sm8750p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:snapdragon_460_mobile_platform_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:snapdragon_460_mobile_platform:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:snapdragon_662_mobile_platform_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:snapdragon_662_mobile_platform:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:snapdragon_8_elite_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:snapdragon_8_elite:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:snapdragon_8_elite_gen_5_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:snapdragon_8_elite_gen_5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:snapdragon_8_gen_2_mobile_platform_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:snapdragon_8_gen_2_mobile_platform:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:snapdragon_8_gen_3_mobile_platform_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:snapdragon_8_gen_3_mobile_platform:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:snapdragon_8\+_gen_2_mobile_platform_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:snapdragon_8\+_gen_2_mobile_platform:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:snapdragon_865_5g_mobile_platform_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:snapdragon_865_5g_mobile_platform:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:snapdragon_865\+_5g_mobile_platform_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:snapdragon_865\+_5g_mobile_platform:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:snapdragon_870_5g_mobile_platform_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:snapdragon_870_5g_mobile_platform:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:snapdragon_ar1_gen_1_platform_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:snapdragon_ar1_gen_1_platform:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:snapdragon_x55_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:snapdragon_x55_5g_modem-rf_system:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:snapdragon_xr2_5g_platform_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:snapdragon_xr2_5g_platform:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:snapdragon_xr2\+_gen_1_platform_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:snapdragon_xr2\+_gen_1_platform:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:wcd9370:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:wcd9375:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:wcd9385:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:wcd9390_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:wcd9390:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:wcd9395_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:wcd9395:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:wcn3950_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:wcn3950:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:wcn3988:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:wcn7760_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:wcn7760:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:wcn7860_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:wcn7860:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:wcn7861_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:wcn7861:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:wcn7880_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:wcn7880:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:wcn7881_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:wcn7881:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:wsa8810:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:wsa8815:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:wsa8832_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:wsa8832:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:wsa8840:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:wsa8845:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
cpe:2.3:h:qualcomm:wsa8845h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2026-25276
2026-10-03 Alias added: GHSA-c5pf-h876-qpm9

References

Advisory 1

https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bulletin.html

TI-2026-20417 Stack-based Buffer Overflow in WLAN Firmware CVSS 3.1CRITICAL 9.6
TI-2026-20409 Buffer Copy Without Checking Size of Input in Secure Processor CVSS 3.1HIGH 8.8
TI-2026-20407 Buffer Over-read in WLAN Firmware CVSS 3.1HIGH 7.5
TI-2026-68015 Untrusted pointer dereference in Qualcomm Snapdragon graphics CVSS 3.1HIGH 7.8
TI-2025-37131 NULL Pointer Dereference in HLOS CVSS 3.1HIGH 7.8
TI-2025-37129 NULL Pointer Dereference in SPS Applications CVSS 3.1HIGH 7.8

See all 19 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences