๐Ÿ” CVE Alert

CVE-2026-25266

MEDIUM 5.5

Exposed dangerous function in windows host

CVSS Score
5.5
EPSS Score
0.0%
EPSS Percentile
0th

Memory corruption while processing IOCTL command when device is in power-save state.

CWE CWE-749
Vendor qualcomm, inc.
Product snapdragon
Published May 4, 2026
Last Updated May 4, 2026
Stay Ahead of the Next One

Get instant alerts for qualcomm, inc. snapdragon

Be the first to know when new medium vulnerabilities affecting qualcomm, inc. snapdragon are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Affected Versions

Qualcomm, Inc. / Snapdragon
Cologne FastConnect 6900 FastConnect 7800 SC8380XP Snapdragon AR1 Gen 1 Platform WCD9378C WCD9380 WCD9385 WCN7861 WCN7880 WSA8830 WSA8832 WSA8835 WSA8840 WSA8845 WSA8845H X2000077 X2000086 X2000090 X2000092 X2000094 XG101002 XG101032 XG101039

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
docs.qualcomm.com: https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2026-bulletin.html