Memory Corruption in Qualcomm Wi-Fi Driver

Publication date: 2026-07-06

Last updated on: 2026-07-07

Assigner: Qualcomm, Inc.

Description

Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-06

Last Modified

2026-07-07

Generated

2026-07-27

AI Q&A

2026-07-07

EPSS Evaluated

2026-07-25

NVD

CVE-2026-25268

Affected Vendors & Products

Vendor	Product	Version / Range
qualcomm	wsa8835_firmware	*
qualcomm	5g_fixed_wireless_access_platform_firmware	*
qualcomm	ar8035_firmware	*
qualcomm	cq7790_firmware	*
qualcomm	cq8725s_firmware	*
qualcomm	qca4024_firmware	*
qualcomm	qca6174a_firmware	*
qualcomm	qca8075_firmware	*
qualcomm	qca8080_firmware	*
qualcomm	qca8081_firmware	*
qualcomm	qca8082_firmware	*
qualcomm	qca8084_firmware	*
qualcomm	qca8085_firmware	*
qualcomm	qca8101_firmware	*
qualcomm	qca8102_firmware	*
qualcomm	qca8111_firmware	*
qualcomm	qca8112_firmware	*
qualcomm	qca8337_firmware	*
qualcomm	qca8384_firmware	*
qualcomm	qca8385_firmware	*
qualcomm	qca8386_firmware	*
qualcomm	qca9888_firmware	*
qualcomm	qca9889_firmware	*
qualcomm	qcc710_firmware	*
qualcomm	qcf8000_firmware	*
qualcomm	qcf8001_firmware	*
qualcomm	qcm5430_firmware	*
qualcomm	qcm6490_firmware	*
qualcomm	qcn5022_firmware	*
qualcomm	qcn5024_firmware	*
qualcomm	qcn5052_firmware	*
qualcomm	qcn5122_firmware	*
qualcomm	qcn5124_firmware	*
qualcomm	qcn5152_firmware	*
qualcomm	qcn5154_firmware	*
qualcomm	qcn5164_firmware	*
qualcomm	qcn5224_firmware	*
qualcomm	qcn6023_firmware	*
qualcomm	qcn6024_firmware	*
qualcomm	qcn6112_firmware	*
qualcomm	qcn6122_firmware	*
qualcomm	qcn6132_firmware	*
qualcomm	qcn6224_firmware	*
qualcomm	qcn6274_firmware	*
qualcomm	qcn6402_firmware	*
qualcomm	csr8811_firmware	*
qualcomm	fastconnect_6700_firmware	*
qualcomm	fastconnect_6900_firmware	*
qualcomm	fastconnect_7800_firmware	*
qualcomm	fwa_gen_3_ultra_firmware	*
qualcomm	fwa_gen_5_elite_firmware	*
qualcomm	immersive_home_214_platform_firmware	*
qualcomm	immersive_home_216_platform_firmware	*
qualcomm	immersive_home_316_platform_firmware	*
qualcomm	immersive_home_318_platform_firmware	*
qualcomm	immersive_home_3210_platform_firmware	*
qualcomm	immersive_home_326_platform_firmware	*
qualcomm	ipq5010_firmware	*
qualcomm	ipq5028_firmware	*
qualcomm	ipq5300_firmware	*
qualcomm	ipq5302_firmware	*
qualcomm	ipq5312_firmware	*
qualcomm	ipq5332_firmware	*
qualcomm	ipq6000_firmware	*
qualcomm	ipq6010_firmware	*
qualcomm	ipq6018_firmware	*
qualcomm	ipq8076_firmware	*
qualcomm	ipq8078_firmware	*
qualcomm	ipq9008_firmware	*
qualcomm	ipq9048_firmware	*
qualcomm	ipq9554_firmware	*
qualcomm	ipq9570_firmware	*
qualcomm	ipq9574_firmware	*
qualcomm	kobuk_firmware	*
qualcomm	marina_firmware	*
qualcomm	networking_pro_1200_platform_firmware	*
qualcomm	networking_pro_1210_platform_firmware	*
qualcomm	networking_pro_1610_platform_firmware	*
qualcomm	networking_pro_400_platform_firmware	*
qualcomm	networking_pro_600_platform_firmware	*
qualcomm	networking_pro_610_platform_firmware	*
qualcomm	networking_pro_800_platform_firmware	*
qualcomm	networking_pro_810_platform_firmware	*
qualcomm	orne_firmware	*
qualcomm	qca0000_firmware	*
qualcomm	qcn6412_firmware	*
qualcomm	qcn6422_firmware	*
qualcomm	qcn6432_firmware	*
qualcomm	qcn9000_firmware	*
qualcomm	qcn9012_firmware	*
qualcomm	qcn9013_firmware	*
qualcomm	qcn9022_firmware	*
qualcomm	qcn9024_firmware	*
qualcomm	qcn9070_firmware	*
qualcomm	qcn9100_firmware	*
qualcomm	qcn9160_firmware	*
qualcomm	qcn9274_firmware	*
qualcomm	qfw7114_firmware	*
qualcomm	qfw7124_firmware	*
qualcomm	qfw7224_firmware	*
qualcomm	qmx82l_firmware	*
qualcomm	qmx85l_firmware	*
qualcomm	video_collaboration_vc3_platform_firmware	*
qualcomm	qxm8083_firmware	*
qualcomm	sar2130p_firmware	*
qualcomm	sdx61_firmware	*
qualcomm	sdx65m_firmware	*
qualcomm	sdx81_firmware	*
qualcomm	snapdragon_460_mobile_platform_firmware	*
qualcomm	snapdragon_662_mobile_platform_firmware	*
qualcomm	snapdragon_auto_5g_modem-rf_firmware	*
qualcomm	snapdragon_x62_5g_modem-rf_system_firmware	*
qualcomm	snapdragon_x65_5g_modem-rf_system_firmware	*
qualcomm	snapdragon_x72_5g_modem-rf_system_firmware	*
qualcomm	snapdragon_x75_5g_modem-rf_system_firmware	*
qualcomm	sw-only_firmware	*
qualcomm	wcd9340_firmware	*
qualcomm	wcd9370_firmware	*
qualcomm	wcd9375_firmware	*
qualcomm	wcd9380_firmware	*
qualcomm	wcd9385_firmware	*
qualcomm	wcn3950_firmware	*
qualcomm	wcn3988_firmware	*
qualcomm	wcn6755_firmware	*
qualcomm	wcn7861_firmware	*
qualcomm	wcn7881_firmware	*
qualcomm	wsa8830_firmware	*
qualcomm	wsa8832_firmware	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

This vulnerability involves memory corruption that occurs when processing invalid HT40 channel layouts during dynamic channel switching operations.

Impact Analysis

The vulnerability has a high severity with a CVSS base score of 8.8, indicating it can lead to significant impacts including complete confidentiality, integrity, and availability compromise of the affected system.

Hi! I’m here to help you understand CVE-2026-25268. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70