CVE-2026-25288

Buffer Over-read in WLAN Firmware

State: Published
Severity: 7.4 High
Published: Aug 4, 2026
Updated: Aug 4, 2026
Reserved: Feb 2, 2026

Description

Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size.

Scores

CVSS	Score	Vector	Source
3.1	7.4 High	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H	qualcomm

Weaknesses

CWE-126 Buffer Over-read

Affected Products

Product	Versions
SnapdragonQualcomm, Inc.	CologneAffected CQ7790Affected FastConnect 6900Affected FastConnect 7800Affected OrneAffected Palawan25Affected PandeiroAffected QCM8838Affected QLN1083BDAffected QLN1086BDAffected QMB715Affected QMP1000Affected QPA1083BDAffected QPA1086BDAffected QXM1093Affected QXM1094Affected QXM1095Affected QXM1096Affected SC8380XPAffected SDR753Affected Snapdragon 7 Gen 4 Mobile PlatformAffected Snapdragon 8 Elite Gen 5Affected WCD9378Affected WCD9378CAffected WCD9380Affected and 18 more versions

Product

Versions

SnapdragonQualcomm, Inc.

CologneAffected
CQ7790Affected
FastConnect 6900Affected
FastConnect 7800Affected
OrneAffected
Palawan25Affected
PandeiroAffected
QCM8838Affected
QLN1083BDAffected
QLN1086BDAffected
QMB715Affected
QMP1000Affected
QPA1083BDAffected
QPA1086BDAffected
QXM1093Affected
QXM1094Affected
QXM1095Affected
QXM1096Affected
SC8380XPAffected
SDR753Affected
Snapdragon 7 Gen 4 Mobile PlatformAffected
Snapdragon 8 Elite Gen 5Affected
WCD9378Affected
WCD9378CAffected
WCD9380Affected
and 18 more versions

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-bulletin.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.