docs.qualcomm.com
https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-bulletin.html CVE-2026-25288
HIGH
Buffer Over-read in WLAN Firmware
Record summary
CVE-2026-25288 has a selected CVSS score of 7.4 (high).
Description
Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 4, 2026 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
SnapdragonBrowse Qualcomm, Inc. / SnapdragonDefault status: unaffected | CVE List | Cologne | affected |
| CQ7790 | affected | ||
| FastConnect 6900 | affected | ||
| FastConnect 7800 | affected | ||
| Orne | affected | ||
| Palawan25 | affected | ||
| Pandeiro | affected | ||
| QCM8838 | affected | ||
| QLN1083BD | affected | ||
| QLN1086BD | affected | ||
| QMB715 | affected | ||
| QMP1000 | affected | ||
| Showing 12 of 43 version ranges | |||
References
2nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2026-25288