CVE-2026-25293

CRITICAL

Snapdragon >=QCA7005 <QCA7005 - Buffer Overflow due to Incorrect Authorization

Title source: llm
STIX 2.1

Description

Buffer overflow due to incorrect authorization in PLC FW

References (1)

Core 1

Scores

CVSS v3 9.6
EPSS 0.0004
EPSS Percentile 14.1%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-863
Status published
Products (2)
qualcomm/qca7005_firmware
Qualcomm, Inc./Snapdragon QCA7005
Published May 04, 2026
Tracked Since May 04, 2026