CVE-2026-25274

Undergoing Analysis Undergoing Analysis - In Progress

Memory Corruption in Qualcomm DMA Driver

Publication date: 2026-10-06

Last updated on: 2026-10-09

Assigner: Qualcomm, Inc.

Description

Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-09

Generated

2026-10-19

AI Q&A

2026-10-06

EPSS Evaluated

2026-10-18

NVD

CVE-2026-25274

EUVD

EUVD-2026-92976

Affected Vendors & Products

Vendor	Product	Version / Range
qualcomm	aqt1000_firmware	*
qualcomm	cologne_firmware	*
qualcomm	congo_firmware	*
qualcomm	fastconnect_6200_firmware	*
qualcomm	fastconnect_6700_firmware	*
qualcomm	fastconnect_6800_firmware	*
qualcomm	fastconnect_6900_firmware	*
qualcomm	fastconnect_7800_firmware	*
qualcomm	iqx5121_firmware	*
qualcomm	iqx7181_firmware	*
qualcomm	qca0000_firmware	*
qualcomm	qca2062_firmware	*
qualcomm	qca2064_firmware	*
qualcomm	qca2065_firmware	*
qualcomm	qca2066_firmware	*
qualcomm	qca6391_firmware	*
qualcomm	qca6420_firmware	*
qualcomm	qca6430_firmware	*
qualcomm	qcm5430_firmware	*
qualcomm	qcm6490_firmware	*
qualcomm	fastconnect_8800_mobile_connectivity_system_firmware	*
qualcomm	video_collaboration_vc3_platform_firmware	*
qualcomm	sc8380xp_firmware	*
qualcomm	snapdragon_7c+_gen_3_compute_firmware	*
qualcomm	snapdragon_8c_compute_platform_firmware	*
qualcomm	snapdragon_8cx_compute_platform_firmware	*
qualcomm	snapdragon_8cx_gen_2_5g_compute_platform_"poipu_pro"_firmware	*
qualcomm	snapdragon_8cx_gen_3_compute_platform_firmware	*
qualcomm	snapdragon_x2_elite_firmware	*
qualcomm	wcd9340_firmware	*
qualcomm	wcd9341_firmware	*
qualcomm	wcd9370_firmware	*
qualcomm	wcd9375_firmware	*
qualcomm	wcd9378c_firmware	*
qualcomm	wcd9380_firmware	*
qualcomm	wcd9385_firmware	*
qualcomm	wcn7861_firmware	*
qualcomm	wcn7880_firmware	*
qualcomm	wsa8810_firmware	*
qualcomm	wsa8815_firmware	*
qualcomm	wsa8830_firmware	*
qualcomm	wsa8835_firmware	*
qualcomm	wsa8840_firmware	*
qualcomm	wsa8845_firmware	*
qualcomm	wsa8845h_firmware	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-416	The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Attack-Flow Graph

Executive Summary

This is a memory corruption vulnerability in Qualcomm Snapdragon devices caused by improper synchronization during concurrent DMA buffer allocation and deallocation. This can lead to system instability or arbitrary code execution.

Detection Guidance

This vulnerability involves memory corruption during concurrent DMA buffer operations. Detection requires analyzing system logs for memory allocation errors or crashes during DMA operations. Check for Qualcomm Snapdragon device logs for DMA-related errors or kernel panics.

Impact Analysis

An attacker could exploit this to crash your device, gain unauthorized access, or execute malicious code. It primarily affects devices using Qualcomm Snapdragon processors with improper DMA handling.

Compliance Impact

This vulnerability could lead to memory corruption during DMA operations, potentially causing unauthorized access or data leaks. Such issues may violate data protection requirements under GDPR (e.g., integrity and confidentiality principles) and HIPAA (e.g., safeguarding protected health information).

Mitigation Strategies

Apply vendor-provided patches or updates for Qualcomm Snapdragon devices to address memory corruption in DMA buffer handling. Ensure proper synchronization mechanisms are implemented in concurrent DMA operations.

Hi! I’m here to help you understand CVE-2026-25274. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70