CVE-2026-25291
Received
Received - Intake
Memory Corruption in Qualcomm Shared Memory Page Lists
Vulnerability report for CVE-2026-25291, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-10-06
Last updated on: 2026-10-06
Assigner: Qualcomm, Inc.
Description
Description
Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Qualcomm, | Inc. | Snapdragon Themisto |
| Qualcomm, | Inc. | Snapdragon WCD9370 |
| Qualcomm, | Inc. | Snapdragon WCD9375 |
| Qualcomm, | Inc. | Snapdragon WCD9378 |
| Qualcomm, | Inc. | Snapdragon WCD9380 |
| Qualcomm, | Inc. | Snapdragon WCD9385 |
| Qualcomm, | Inc. | Snapdragon WCD9395 |
| Qualcomm, | Inc. | Snapdragon WCN3950 |
| Qualcomm, | Inc. | Snapdragon WCN3988 |
| Qualcomm, | Inc. | Snapdragon WCN7860 |
| Qualcomm, | Inc. | Snapdragon WCN7861 |
| Qualcomm, | Inc. | Snapdragon WSA8810 |
| Qualcomm, | Inc. | Snapdragon WSA8830 |
| Qualcomm, | Inc. | Snapdragon WSA8832 |
| Qualcomm, | Inc. | Snapdragon WSA8835 |
| Qualcomm, | Inc. | Snapdragon WSA8840 |
| Qualcomm, | Inc. | Snapdragon WSA8845 |
| Qualcomm, | Inc. | Snapdragon WSA8845H |
| Qualcomm, | Inc. | Snapdragon X1E80100 |
| Qualcomm, | Inc. | Snapdragon XRV7209 |
| Qualcomm, | Inc. | Snapdragon XRV9209 |
| Qualcomm, | Inc. | Snapdragon FastConnect 6700 |
| Qualcomm, | Inc. | Snapdragon FastConnect 6900 |
| Qualcomm, | Inc. | Snapdragon FastConnect 7800 |
| Qualcomm, | Inc. | Snapdragon LeMans_AU_LGIT |
| Qualcomm, | Inc. | Snapdragon LeMansAU |
| Qualcomm, | Inc. | Snapdragon Orne |
| Qualcomm, | Inc. | Snapdragon Pandeiro |
| Qualcomm, | Inc. | Snapdragon QAM8255P |
| Qualcomm, | Inc. | Snapdragon QAM8295P |
| Qualcomm, | Inc. | Snapdragon QAMSRV1H |
| Qualcomm, | Inc. | Snapdragon QAMSRV1M |
| Qualcomm, | Inc. | Snapdragon QCA6391 |
| Qualcomm, | Inc. | Snapdragon QCA6574AU |
| Qualcomm, | Inc. | Snapdragon QCA6595 |
| Qualcomm, | Inc. | Snapdragon QCA6696 |
| Qualcomm, | Inc. | Snapdragon QCA6698AQ |
| Qualcomm, | Inc. | Snapdragon QCA6797AQ |
| Qualcomm, | Inc. | Snapdragon QCM4290 |
| Qualcomm, | Inc. | Snapdragon QCM5430 |
| Qualcomm, | Inc. | Snapdragon QCM6490 |
| Qualcomm, | Inc. | Snapdragon QCM8838 |
| Qualcomm, | Inc. | Snapdragon QCS4290 |
| Qualcomm, | Inc. | Snapdragon QLN1083BD |
| Qualcomm, | Inc. | Snapdragon QLN1086BD |
| Qualcomm, | Inc. | Snapdragon QPA1083BD |
| Qualcomm, | Inc. | Snapdragon QPA1086BD |
| Qualcomm, | Inc. | Snapdragon Qualcomm Dragonwing Q-8845 |
| Qualcomm, | Inc. | Snapdragon Qualcomm Video Collaboration VC3 Platform |
| Qualcomm, | Inc. | Snapdragon QXM1083 |
| Qualcomm, | Inc. | Snapdragon QXM1086 |
| Qualcomm, | Inc. | Snapdragon QXM1093 |
| Qualcomm, | Inc. | Snapdragon QXM1094 |
| Qualcomm, | Inc. | Snapdragon QXM1095 |
| Qualcomm, | Inc. | Snapdragon QXM1096 |
| Qualcomm, | Inc. | Snapdragon SA7255P |
| Qualcomm, | Inc. | Snapdragon SA7775P |
| Qualcomm, | Inc. | Snapdragon SA8155P |
| Qualcomm, | Inc. | Snapdragon SA8255P |
| Qualcomm, | Inc. | Snapdragon SA8295P |
| Qualcomm, | Inc. | Snapdragon SA8620P |
| Qualcomm, | Inc. | Snapdragon SA8770P |
| Qualcomm, | Inc. | Snapdragon SA9000P |
| Qualcomm, | Inc. | Snapdragon SAR1165P |
| Qualcomm, | Inc. | Snapdragon SC8380XP |
| Qualcomm, | Inc. | Snapdragon SD662 |
| Qualcomm, | Inc. | Snapdragon SDR753 |
| Qualcomm, | Inc. | Snapdragon SM6225P |
| Qualcomm, | Inc. | Snapdragon SM7325P |
| Qualcomm, | Inc. | Snapdragon Snapdragon 460 Mobile Platform |
| Qualcomm, | Inc. | Snapdragon Snapdragon 662 Mobile Platform |
| Qualcomm, | Inc. | Snapdragon Snapdragon 680 4G Mobile Platform |
| Qualcomm, | Inc. | Snapdragon Snapdragon 685 4G Mobile Platform |
| Qualcomm, | Inc. | Snapdragon Snapdragon 778G 5G Mobile Platform |
| Qualcomm, | Inc. | Snapdragon Snapdragon 778G+ 5G Mobile Platform |
| Qualcomm, | Inc. | Snapdragon Snapdragon 782G Mobile Platform |
| Qualcomm, | Inc. | Snapdragon Snapdragon 7c+ Gen 3 Compute |
| Qualcomm, | Inc. | Snapdragon Snapdragon 8 Elite Gen 5 |
| Qualcomm, | Inc. | Snapdragon Snapdragon 888 5G Mobile Platform |
| Qualcomm, | Inc. | Snapdragon Snapdragon 888+ 5G Mobile Platform |
| Qualcomm, | Inc. | Snapdragon Snapdragon AR1 Gen 1 Platform |
| Qualcomm, | Inc. | Snapdragon Snapdragon AR1+ Gen 1 Platform |
| Qualcomm, | Inc. | Snapdragon Snapdragon W5+ Gen 1 Wearable Platform |
| Qualcomm, | Inc. | Snapdragon Snapdragon X53 5G Modem-RF System |
| Qualcomm, | Inc. | Snapdragon Snapdragon Reality Elite Platform |
| Qualcomm, | Inc. | Snapdragon Snapdragon Wear Elite platform |
| Qualcomm, | Inc. | Snapdragon SRV1H |
| Qualcomm, | Inc. | Snapdragon SRV1M |
| Qualcomm, | Inc. | Snapdragon SW5100 |
| Qualcomm, | Inc. | Snapdragon SW5100P |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-416 | The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer. |