Memory Corruption in Qualcomm Chipset Firmware via IOCTL

Publication date: 2026-06-01

Last updated on: 2026-06-02

Assigner: Qualcomm, Inc.

Description

Memory corruption while processing IOCTL calls for escape operations.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-01

Last Modified

2026-06-02

Generated

2026-07-12

AI Q&A

2026-06-02

EPSS Evaluated

2026-07-11

NVD

CVE-2026-25258

EUVD

EUVD-2026-33823

Affected Vendors & Products

Vendor	Product	Version / Range
qualcomm	cologne_firmware	*
qualcomm	fastconnect_6900_firmware	*
qualcomm	fastconnect_7800_firmware	*
qualcomm	iqx5121_firmware	*
qualcomm	iqx7181_firmware	*
qualcomm	qca0000_firmware	*
qualcomm	sc8380xp_firmware	*
qualcomm	wcd9378c_firmware	*
qualcomm	wcd9380_firmware	*
qualcomm	wcd9385_firmware	*
qualcomm	wsa8840_firmware	*
qualcomm	wsa8845_firmware	*
qualcomm	wsa8845h_firmware	*
qualcomm	x2000077_firmware	*
qualcomm	x2000086_firmware	*
qualcomm	x2000090_firmware	*
qualcomm	x2000092_firmware	*
qualcomm	x2000094_firmware	*
qualcomm	xg101002_firmware	*
qualcomm	xg101032_firmware	*
qualcomm	xg101039_firmware	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability involves memory corruption that occurs while processing IOCTL calls related to escape operations.

Impact Analysis

The vulnerability can lead to significant impacts including high confidentiality, integrity, and availability risks due to memory corruption during IOCTL escape operations.

Hi! I’m here to help you understand CVE-2026-25258. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70