Riskcovery

CVE-2026-25302

Improper Verification of Cryptographic Signature in Boot

State
Published
Severity
7.1 High
Published
Oct 6, 2026
Updated
Oct 6, 2026
Reserved
Feb 2, 2026

Read the record on cve.org

Description

Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.

Scores

CVSSScoreVectorSource
3.17.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:Hqualcomm

Weaknesses

  • CWE-347 Improper Verification of Cryptographic Signature

Affected Products

ProductVersions
SnapdragonQualcomm, Inc.
  • 5G Fixed Wireless Access PlatformAffected
  • AR8035Affected
  • CologneAffected
  • CQ7790Affected
  • CQ8725SAffected
  • CQ8750MAffected
  • CSRA6620Affected
  • CSRA6640Affected
  • FastConnect 6200Affected
  • FastConnect 6700Affected
  • FastConnect 6800Affected
  • FastConnect 6900Affected
  • FastConnect 7800Affected
  • FWA Gen 3 Ultra PlatformAffected
  • FWA Gen 5 Elite PlatformAffected
  • G1 Gen 1Affected
  • G2 Gen 1Affected
  • G3x Gen 2Affected
  • IPQ9048Affected
  • IPQ9570Affected
  • IPQ9574Affected
  • IQ10 SeriesAffected
  • IQ6 Series PlatformAffected
  • IQ8 Series PlatformAffected
  • IQ9 Series PlatformAffected
  • and 261 more versions

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.