VULNERABILITY INTELLIGENCE
CVE-2026-25292
CVSS score7.6 HIGH
EPSS probability0.15%
CISA KEVNot currently listed
Published2026-08-04
Last modified2026-10-23
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Description
Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration.
Weakness classification
- CWE-1286: Improper Validation of Syntactic Correctness of Input
Primary references
- product-security@qualcomm.com — Patch, Vendor Advisory