CVE-2026-25267: Qualcomm, Inc. Snapdragon, заобикаляне на вход и права

Описание

Оригинално описание

Memory corruption when non-secure loader rewrites page tables before secure memory initialization.

Засегнати продукти

• Qualcomm, Inc. Snapdragon: 315 5G IoT Modem; 5G Fixed Wireless Access Platform; 9205 LTE Modem; 9205S Modem; AQT1000; AR8031; AR8035; Cologne; CSRA6620; CSRA6640; CSRB31024; C-V2X 9150; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; FSM100 Platform; G1 Gen 1; G3x Gen 2; IQ6 Series Platform; IQ8 Series Platform; IQ9 Series Platform; IQX5121; MBM415; Monaco_IOT; Networking Pro 1210 Platform; Networking Pro 1610 Platform; Networking Pro 610 Platform; Networking Pro 810 Platform; Q-4390; QCA0000; QCA4004; QCA6174A; QCA6391; QCA6420; QCA6421; QCA6426; QCA6430; QCA6431; QCA6436; QCA6564; QCA6564A; QCA6564AU; QCA6574; QCA6574A; QCA6574AU; QCA6595; QCA6595AU; QCA6688AQ; QCA6696; QCA6698AQ; QCA6698AU; QCA6797AQ; QCA8337; QCA9377; QCA9984; QCC2070; QCC6705; QCC710; QCC711; QCM2290; QCM4290; QCM4325; QCM5430; QCM6125; QCM6490; QCM8550; QCN7606; QCN9011; QCN9012; QCS2290; QCS410; QCS4290; QCS8155; QCS8550; QRB5165N; QSM8250; QSM8350; Qualcomm Dragonwing IQ-X; Qualcomm Dragonwing QCM4490; Qualcomm Dragonwing QRB5165; Qualcomm QTS110 Tracker; Qualcomm Video Collaboration VC1 Platform; Qualcomm Video Collaboration VC3 Platform; Qualcomm Video Collaboration VC5 Platform; Robotics RB2 Platform; Robotics RB5 Platform; SA2150P; SA4150P; SA4155P; SA6145P; SA6150P; SA6155; SA6155P; SA8145P; SA8150P; SA8155; SA8155P; SA8195P; SC8180X+SDX55; SC8380XP; SD 675; SD 8 Gen1 5G; SD460; SD662; SD730; SD855; SD865 5G; SD888; SDA640; SDM640; SM4125; SM6225P; SM6250; SM6250P; SM6370; SM7315; SM7325P; SM8550P; Smart Audio 400 Platform; Snapdragon 4 Gen 1 Mobile Platform; Snapdragon 4 Gen 2 Mobile Platform; Snapdragon 460 Mobile Platform; Snapdragon 480 5G Mobile Platform; Snapdragon 480+ 5G Mobile Platform; Snapdragon 662 Mobile Platform; Snapdragon 665 Mobile Platform; Snapdragon 675 Mobile Platform; Snapdragon 678 Mobile Platform; Snapdragon 680 4G Mobile Platform; Snapdragon 685 4G Mobile Platform; Snapdragon 695 5G Mobile Platform; Snapdragon 720G Mobile Platform; Snapdragon 730 Mobile Platform; Snapdragon 730G Mobile Platform; Snapdragon 732G Mobile Platform; Snapdragon 778G 5G Mobile Platform; Snapdragon 778G+ 5G Mobile Platform; Snapdragon 780G 5G Mobile Platform; Snapdragon 782G Mobile Platform; Snapdragon 7c Compute Platform; Snapdragon 7c Gen 2 Compute Platform "Rennell Pro"; Snapdragon 7c+ Gen 3 Compute; Snapdragon 8 Gen 1 Mobile Platform; Snapdragon 8 Gen 2 Mobile Platform; Snapdragon 8+ Gen 1 Mobile Platform; Snapdragon 8+ Gen 2 Mobile Platform; Snapdragon 855 Mobile Platform; Snapdragon 855+/860 Mobile Platform; Snapdragon 865 5G Mobile Platform; Snapdragon 865+ 5G Mobile Platform; Snapdragon 870 5G Mobile Platform; Snapdragon 888 5G Mobile Platform; Snapdragon 888+ 5G Mobile Platform; Snapdragon 8c Compute Platform "Poipu Lite"; Snapdragon 8c Compute Platform (SC8180XP-AD) "Poipu Lite"; Snapdragon 8cx Compute Platform; Snapdragon 8cx Compute Platform "Poipu Pro"; Snapdragon 8cx Gen 2 5G Compute Platform; Snapdragon 8cx Gen 2 5G Compute Platform "Poipu Pro"; Snapdragon Auto 5G Modem-RF; Snapdragon C Platform; Snapdragon Wear 1300 Platform; Snapdragon X24 LTE Modem; Snapdragon X50 5G Modem-RF System; Snapdragon X53 5G Modem-RF System; Snapdragon X55 5G Modem-RF System; Snapdragon XR2 5G Platform; Snapdragon XR2+ Gen 1 Platform; Snapdragon Auto 4G Modem; SXR2130; TalynPlus; Vision Intelligence 300 Platform; Vision Intelligence 400 Platform; WCD9306; WCD9335; WCD9340; WCD9341; WCD9360; WCD9370; WCD9371; WCD9375; WCD9380; WCD9385; WCD9390; WCD9395; WCN3910; WCN3950; WCN3980; WCN3988; WCN3990; WCN3999; WCN6740; WSA8810; WSA8815; WSA8830; WSA8832; WSA8835; WSA8840; WSA8845; WSA8845H

Вид слабост

• CWE-862 Missing Authorization

История

Други уязвимости в Qualcomm, Inc. Snapdragon

• 7.8CVE-2026-57559
• 7.8CVE-2026-57555
• 7.8CVE-2026-57554
• 7.5CVE-2026-57546
• 7.8CVE-2026-57545

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-25267
• https://nvd.nist.gov/vuln/detail/CVE-2026-25267
• https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2026-bulletin.html