CVE-2026-25288
Received Received - Intake

Transient Denial of Service in Qualcomm Chipset Firmware

Vulnerability report for CVE-2026-25288, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-08-04

Last updated on: 2026-08-04

Assigner: Qualcomm, Inc.

Description

Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-04
Last Modified
2026-08-04
Generated
2026-08-04
AI Q&A
2026-08-04
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-126 The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves a temporary denial of service (DOS) condition that occurs when processing a short target wake time channel usage response frame with an insufficient packet size. This means an attacker could send a maliciously crafted frame that causes the system to become unresponsive temporarily.

Impact Analysis

This vulnerability could lead to system downtime or degraded performance if exploited. It may cause network devices or systems to stop responding temporarily, disrupting normal operations and potentially leading to loss of service.

Compliance Impact

This vulnerability causes a transient denial of service (DOS) condition, which could disrupt the availability of affected systems. For compliance with standards like GDPR and HIPAA, availability is a key requirement, so such disruptions may lead to non-compliance if not addressed promptly.

Mitigation Strategies

Update affected Qualcomm components to the latest patched versions. Monitor network traffic for malformed target wake time channel usage response frames. Apply vendor-supplied security patches as soon as available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-25288. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart