CVE-2026-25289
Analyzed Analyzed - Analysis Complete

Memory Corruption in NAN Service Discovery Frames

Publication date: 2026-08-04

Last updated on: 2026-08-06

Assigner: Qualcomm, Inc.

Description
Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-04
Last Modified
2026-08-06
Generated
2026-08-24
AI Q&A
2026-08-04
EPSS Evaluated
2026-08-23
NVD
CVE-2026-25289
EUVD
EUVD-2026-52737

Affected Vendors & Products

Showing 201 associated CPEs
Vendor Product Version / Range
qualcomm sm7550p_firmware *
qualcomm sm7635p_firmware *
qualcomm sm7675_firmware *
qualcomm sm7675p_firmware *
qualcomm sm8425_firmware *
qualcomm sm8550p_firmware *
qualcomm sm8635_firmware *
qualcomm sm8635p_firmware *
qualcomm sm8650q_firmware *
qualcomm sm8735p_firmware *
qualcomm sm8750p_firmware *
qualcomm sm8845p_firmware *
qualcomm snapdragon_6_gen_1_mobile_platform_firmware *
qualcomm snapdragon_6_gen_3_mobile_platform_firmware *
qualcomm snapdragon_6_gen_4_mobile_platform_firmware *
qualcomm snapdragon_7_gen_4_mobile_platform_firmware *
qualcomm snapdragon_7s_gen_3_mobile_platform_firmware *
qualcomm snapdragon_8_elite_firmware *
qualcomm snapdragon_8_elite_gen_5_firmware *
qualcomm snapdragon_8_gen_2_mobile_platform_firmware *
qualcomm snapdragon_8_gen_3_mobile_platform_firmware *
qualcomm snapdragon_8+_gen_2_mobile_platform_firmware *
qualcomm snapdragon_ar1_gen_1_platform_firmware *
qualcomm snapdragon_ar1+_gen_1_platform_firmware *
qualcomm snapdragon_auto_5g_modem-rf_gen_2_firmware *
qualcomm snapdragon_x65_5g_modem-rf_system_firmware *
qualcomm snapdragon_x72_5g_modem-rf_system_firmware *
qualcomm snapdragon_x75_5g_modem-rf_system_firmware *
qualcomm snapdragon_wear_elite_firmware *
qualcomm srv1h_firmware *
qualcomm srv1m_firmware *
qualcomm sxr2230p_firmware *
qualcomm sxr2250p_firmware *
qualcomm sxr2330p_firmware *
qualcomm sxr2350p_firmware *
qualcomm themisto_firmware *
qualcomm wcd9340_firmware *
qualcomm wcd9370_firmware *
qualcomm wcd9371_firmware *
qualcomm wcd9375_firmware *
qualcomm xrv9209_firmware *
qualcomm ar8035_firmware *
qualcomm cologne_firmware *
qualcomm cq7790_firmware *
qualcomm cq8725s_firmware *
qualcomm cq8750m_firmware *
qualcomm fastconnect_6200_firmware *
qualcomm fastconnect_6700_firmware *
qualcomm fastconnect_6900_firmware *
qualcomm fastconnect_7800_firmware *
qualcomm fwa_gen_3_ultra_firmware *
qualcomm fwa_gen_5_elite_firmware *
qualcomm g2_gen_1_firmware *
qualcomm g3x_gen_2_firmware *
qualcomm immersive_home_3210_platform_firmware *
qualcomm immersive_home_326_platform_firmware *
qualcomm ipq5300_firmware *
qualcomm ipq5302_firmware *
qualcomm ipq5312_firmware *
qualcomm ipq5332_firmware *
qualcomm ipq9008_firmware *
qualcomm ipq9554_firmware *
qualcomm ipq9570_firmware *
qualcomm ipq9574_firmware *
qualcomm iqx5121_firmware *
qualcomm iqx7181_firmware *
qualcomm kobuk_firmware *
qualcomm lemans_au_lgit_firmware *
qualcomm lemansau_firmware *
qualcomm milos_firmware *
qualcomm milos_iot_firmware *
qualcomm molokai_firmware *
qualcomm netrani_firmware *
qualcomm networking_pro_1210_firmware *
qualcomm networking_pro_1610_firmware *
qualcomm networking_pro_610_firmware *
qualcomm networking_pro_810_firmware *
qualcomm orne_firmware *
qualcomm palawan25_firmware *
qualcomm pandeiro_firmware *
qualcomm qam8255p_firmware *
qualcomm qam8397p_firmware *
qualcomm qam8797p_firmware *
qualcomm qamsrv1h_firmware *
qualcomm qamsrv1m_firmware *
qualcomm wcd9378_firmware *
qualcomm wcd9378c_firmware *
qualcomm wcd9380_firmware *
qualcomm wcd9385_firmware *
qualcomm wcd9390_firmware *
qualcomm wcd9395_firmware *
qualcomm wcn3988_firmware *
qualcomm wcn6450_firmware *
qualcomm wcn6650_firmware *
qualcomm wcn6755_firmware *
qualcomm wcn7760_firmware *
qualcomm wcn7860_firmware *
qualcomm wcn7861_firmware *
qualcomm wcn7880_firmware *
qualcomm wcn7881_firmware *
qualcomm wsa8810_firmware *
qualcomm wsa8815_firmware *
qualcomm wsa8830_firmware *
qualcomm wsa8832_firmware *
qualcomm wsa8835_firmware *
qualcomm wsa8840_firmware *
qualcomm wsa8845_firmware *
qualcomm wsa8845h_firmware *
qualcomm wsa8850_firmware *
qualcomm wsa8850w_firmware *
qualcomm wsa8855c_firmware *
qualcomm x1e80100_firmware *
qualcomm x2000077_firmware *
qualcomm x2000086_firmware *
qualcomm x2000090_firmware *
qualcomm x2000092_firmware *
qualcomm x2000094_firmware *
qualcomm xg101002_firmware *
qualcomm xg101032_firmware *
qualcomm xg101039_firmware *
qualcomm xrv7209_firmware *
qualcomm qca0000_firmware *
qualcomm qca6391_firmware *
qualcomm qca6554a_firmware *
qualcomm qca6564au_firmware *
qualcomm qca6574_firmware *
qualcomm qca6574a_firmware *
qualcomm qca6574au_firmware *
qualcomm qca6584au_firmware *
qualcomm qca6595_firmware *
qualcomm qca6595au_firmware *
qualcomm qca6678aq_firmware *
qualcomm qca6688aq_firmware *
qualcomm qca6696_firmware *
qualcomm qca6698aq_firmware *
qualcomm qca6698au_firmware *
qualcomm qca6777aq_firmware *
qualcomm qca6787aq_firmware *
qualcomm qca6797aq_firmware *
qualcomm qca8075_firmware *
qualcomm qca8081_firmware *
qualcomm qca8082_firmware *
qualcomm qca8084_firmware *
qualcomm qca8085_firmware *
qualcomm qca8337_firmware *
qualcomm qca8386_firmware *
qualcomm qca8695au_firmware *
qualcomm qcc2073_firmware *
qualcomm qcc2076_firmware *
qualcomm qcc710_firmware *
qualcomm qcf8000_firmware *
qualcomm qcf8001_firmware *
qualcomm qcn5124_firmware *
qualcomm qcn6224_firmware *
qualcomm qcn6274_firmware *
qualcomm qcn6402_firmware *
qualcomm qcn6412_firmware *
qualcomm qcn6422_firmware *
qualcomm qcn6432_firmware *
qualcomm qcn9000_firmware *
qualcomm qcn9011_firmware *
qualcomm qcn9012_firmware *
qualcomm qcn9024_firmware *
qualcomm qcn9274_firmware *
qualcomm qcs6690_firmware *
qualcomm qfw7114_firmware *
qualcomm qfw7124_firmware *
qualcomm qln1083bd_firmware *
qualcomm qln1086bd_firmware *
qualcomm qmb715_firmware *
qualcomm qmp1000_firmware *
qualcomm qmp2001_firmware *
qualcomm qpa1083bd_firmware *
qualcomm qpa1086bd_firmware *
qualcomm qxm1083_firmware *
qualcomm qxm1086_firmware *
qualcomm qxm1093_firmware *
qualcomm qxm1094_firmware *
qualcomm qxm1095_firmware *
qualcomm qxm1096_firmware *
qualcomm sa7255p_firmware *
qualcomm sa7775p_firmware *
qualcomm sa8255p_firmware *
qualcomm sa8620p_firmware *
qualcomm sa8770p_firmware *
qualcomm sa9000p_firmware *
qualcomm sar1165p_firmware *
qualcomm sar2130p_firmware *
qualcomm sc8380xp_firmware *
qualcomm sdx65m_firmware *
qualcomm sdx81_firmware *
qualcomm sm6450p_firmware *
qualcomm sm6475p_firmware *
qualcomm sm6475q_firmware *
qualcomm sm6650p_firmware *
qualcomm sm6850_firmware *
qualcomm sm7425_firmware *
qualcomm sm7435_firmware *
qualcomm sm7435p_firmware *
qualcomm sm7525_firmware *
qualcomm sm7550_firmware *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves memory corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames that have invalid length values. It can lead to system crashes or arbitrary code execution.

Detection Guidance

This vulnerability involves memory corruption in NAN Service Discovery Frames due to invalid length values in Device Capability Extended attributes. Detection requires monitoring network traffic for malformed NAN frames or analyzing system logs for crashes or memory corruption events related to wireless service discovery.

Impact Analysis

This vulnerability can impact you by causing system instability, crashes, or allowing attackers to execute malicious code on your device. It may lead to unauthorized access or data breaches depending on the system affected.

Compliance Impact

This vulnerability involves memory corruption in NAN Service Discovery Frames, which could lead to unauthorized code execution or data exposure. Such issues may violate compliance requirements under GDPR (data protection) and HIPAA (health data security) by enabling data breaches or unauthorized access to sensitive information.

Mitigation Strategies

Apply vendor patches or updates for affected NAN Service Discovery Frame processing components. Disable NAN service discovery if not required. Monitor network traffic for malformed frames with invalid length values in Device Capability Extended attributes.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-25289. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart