Back to the CVE list
CVE-2026-25294

Buffer Over-read in WLAN Firmware

CVSS score

7.4

EPSS probability

%0.1

Risk score

0.0

Published

1 mo ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline
Patch status has not yet been verified

Resmî kaynaklarda yeterli kanıt bulunamadı. Bu sonuç “yama yok” anlamına gelmez.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2026-25294 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

Transient DOS while parsing frame during channel usage.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2026-25294 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1Qualcomm, Inc.Snapdragon View
2qualcommcologne firmware View
3qualcommcologne View
4qualcommcongo firmware View
5qualcommcongo View
6qualcommcq7790 firmware View
7qualcommcq7790 View
8qualcommcq7790m firmware View
9qualcommcq7790m View
10qualcommcq8845s firmware View
11qualcommcq8845s View
12qualcommfastconnect 6200 firmware View
13qualcommfastconnect 6200 View
14qualcommfastconnect 6700 firmware View
15qualcommfastconnect 6700 View
16qualcommfastconnect 6900 firmware View
17qualcommfastconnect 6900 View
18qualcommfastconnect 7800 firmware View
19qualcommfastconnect 7800 View
20qualcommmbm715 firmware View
21qualcommmbm715 View
22qualcommorne firmware View
23qualcommorne View
24qualcommpalawan25 firmware View
25qualcommpalawan25 View
26qualcommpandeiro firmware View
27qualcommpandeiro View
28qualcommq-7790 firmware View
29qualcommq-7790 View
30qualcommqln1083bd firmware View
31qualcommqln1083bd View
32qualcommqln1086bd firmware View
33qualcommqln1086bd View
34qualcommqmp1000 firmware View
35qualcommqmp1000 View
36qualcommqmp2001 firmware View
37qualcommqmp2001 View
38qualcommqpa1083bd firmware View
39qualcommqpa1083bd View
40qualcommqpa1086bd firmware View
41qualcommqpa1086bd View
42qualcommfastconnect 8800 mobile connectivity system firmware View
43qualcommfastconnect 8800 mobile connectivity system View
44qualcommqxm1093 firmware View
45qualcommqxm1093 View
46qualcommqxm1094 firmware View
47qualcommqxm1094 View
48qualcommqxm1095 firmware View
49qualcommqxm1095 View
50qualcommqxm1096 firmware View
51qualcommqxm1096 View
52qualcommsc8380xp firmware View
53qualcommsc8380xp View
54qualcommsm4875 firmware View
55qualcommsm4875 View
56qualcommsm6850 firmware View
57qualcommsm6850 View
58qualcommsm7675 firmware View
59qualcommsm7675 View
60qualcommsm7675p firmware View
61qualcommsm7675p View
62qualcommsm7750p firmware View
63qualcommsm7750p View
64qualcommsm8635 firmware View
65qualcommsm8635 View
66qualcommsm8635p firmware View
67qualcommsm8635p View
68qualcommsm8650q firmware View
69qualcommsm8650q View
70qualcommsm8735p firmware View
71qualcommsm8735p View
72qualcommsm8750p firmware View
73qualcommsm8750p View
74qualcommsm8845p firmware View
75qualcommsm8845p View
76qualcommsm8950 firmware View
77qualcommsm8950 View
78qualcommsm8950p firmware View
79qualcommsm8950p View
80qualcommsm8975 firmware View
81qualcommsm8975 View
82qualcommsm8975p firmware View
83qualcommsm8975p View
84qualcommsnapdragon 7 gen 4 mobile platform firmware View
85qualcommsnapdragon 7 gen 4 mobile platform View
86qualcommsnapdragon 8 elite firmware View
87qualcommsnapdragon 8 elite View
88qualcommsnapdragon 8 elite gen 5 firmware View
89qualcommsnapdragon 8 elite gen 5 View
90qualcommsnapdragon 8 gen 3 mobile platform firmware View
91qualcommsnapdragon 8 gen 3 mobile platform View
92qualcommsnapdragon 8 gen 5 firmware View
93qualcommsnapdragon 8 gen 5 View
94qualcommsw-only firmware View
95qualcommsw-only View
96qualcommwcd9370 firmware View
97qualcommwcd9370 View
98qualcommwcd9375 firmware View
99qualcommwcd9375 View
100qualcommwcd9378 firmware View
101qualcommwcd9378 View
102qualcommwcd9380 firmware View
103qualcommwcd9380 View
104qualcommwcd9385 firmware View
105qualcommwcd9385 View
106qualcommwcd9390 firmware View
107qualcommwcd9390 View
108qualcommwcd9395 firmware View
109qualcommwcd9395 View
110qualcommwcn3988 firmware View
111qualcommwcn3988 View
112qualcommwcn6450 firmware View
113qualcommwcn6450 View
114qualcommwcn6755 firmware View
115qualcommwcn6755 View
116qualcommwcn7760 firmware View
117qualcommwcn7760 View
118qualcommwcn7860 firmware View
119qualcommwcn7860 View
120qualcommwcn7861 firmware View
121qualcommwcn7861 View
122qualcommwcn7880 firmware View
123qualcommwcn7880 View
124qualcommwcn7881 firmware View
125qualcommwcn7881 View
126qualcommwcn8841 firmware View
127qualcommwcn8841 View
128qualcommwsa8830 firmware View
129qualcommwsa8830 View
130qualcommwsa8832 firmware View
131qualcommwsa8832 View
132qualcommwsa8835 firmware View
133qualcommwsa8835 View
134qualcommwsa8840 firmware View
135qualcommwsa8840 View
136qualcommwsa8845 firmware View
137qualcommwsa8845 View
138qualcommwsa8845h firmware View
139qualcommwsa8845h View
140qualcommwsa8850 firmware View
141qualcommwsa8850 View
142qualcommwsa8850w firmware View
143qualcommwsa8850w View
144qualcommwsa8855c firmware View
145qualcommwsa8855c View
146qualcommx1e80100 firmware View
147qualcommx1e80100 View
148qualcommxrv7209 firmware View
149qualcommxrv7209 View
150qualcommxrv9209 firmware View
151qualcommxrv9209 View
Total affected vendors: 2|Products: 151

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
7.4CVSS V3_1HIGHCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:HCVE CNA
7.4CVSS V31HIGHCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:HNVD

Patch and Remediation Guide

Solution & Remediation Advisory

Patch status unknown

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Until a patch is confirmed, follow the vendor advisory; do not read an unknown status as “no patch”.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2026-25294 is associated with the following CWEs:

CWE-126: Common Weakness Enumeration Entry CWE-126

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2026-25294 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureBitişik ağ
PermissionsGerekmiyor
UserGerekmiyor

Official Sources and Advisories

https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2026-bulletin.htmlvendor-advisory

CVSS Vector Radar Chart

7.4 / 10
Attack VectorAdjacentComplexityLowPrivilegesNoneUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityHigh

Vulnerability Scoring Details

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Attack VectorAdjacent network
Attack ComplexityLow
Privileges RequiredNone required
User InteractionNone required
Confidentiality (Gizlilik)Low
Integrity (Bütünlük)None
Availability (Erişilebilirlik)High

Yama durumu bilinmiyor

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Follow the vendor

QI
Qualcomm, Inc. logo
Qualcomm, Inc.
Q
qualcomm logo
qualcomm

Weakness Type (CWE & CAPEC)

CWE-126

Similar Vulnerabilities

6.5
CVE-2020-3702Vulnerability in Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure And Networking
QI
Qualcomm, Inc. logo
VendorQualcomm, Inc.ProductSnapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking+27 etkilenen
Patch status unknownEPSS %06 y ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-25294"