CVE-2026-25275: Qualcomm, Inc. Snapdragon, грешка в паметта

Описание

Оригинално описание

Transient DOS when processing authentication frames with invalid FILS information element header lengths.

Засегнати продукти

• Qualcomm, Inc. Snapdragon: Snapdragon G1 Gen 2 Gaming Platform; 5G Fixed Wireless Access Platform; AQT1000; AR8031; AR8035; C110100; Cologne; Congo; CQ2390M; CQ2390S; CQ7790; CQ7790M; CQ8725S; CQ8750M; CQ8845S; CSR8811; CSRA6620; CSRA6640; CSRB31024; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; Flight RB5 5G Platform; FWA Gen 3 Ultra Platform; FWA Gen 5 Elite Platform; G1 Gen 1; G2 Gen 1; G3x Gen 2; Immersive Home 214 Platform; Immersive Home 216 Platform; Immersive Home 316 Platform; Immersive Home 318 Platform; Immersive Home 3210 Platform; Immersive Home 326 Platform; IPQ5010; IPQ5028; IPQ5302; IPQ5312; IPQ5332; IPQ6000; IPQ6010; IPQ6018; IPQ8070; IPQ8071; IPQ8072; IPQ8074; IPQ8076; IPQ8078; IPQ9008; IPQ9554; IPQ9570; IPQ9574; IQ10 Series; IQ6 Series Platform; IQ8 Series Platform; IQ9 Series Platform; IQX5121; IQX7181; Kalpeni; Kobuk; LeMans_AU_LGIT; LeMansAU; Marina; MBM415; MBM715; Milos; Milos_IOT; Monaco_IOT; Netrani; Networking Pro 1200 Platform; Networking Pro 1210 Platform; Networking Pro 1610 Platform; Networking Pro 400 Platform; Networking Pro 600 Platform; Networking Pro 610 Platform; Networking Pro 800 Platform; Networking Pro 810 Platform; NPro A8 Elite Platform; Orne; Palawan25; Pandeiro; PMP8074; Q-4390; Q-7790; QAM8255P; QAM8295P; QAMSRV1H; QAMSRV1M; QCA0000; QCA2062; QCA2064; QCA2065; QCA2066; QCA4024; QCA6391; QCA6420; QCA6428; QCA6430; QCA6438; QCA6554A; QCA6564AU; QCA6574; QCA6574A; QCA6574AU; QCA6584AU; QCA6595; QCA6595AU; QCA6678AQ; QCA6688AQ; QCA6696; QCA6698AQ; QCA6698AU; QCA6777AQ; QCA6787AQ; QCA6797AQ; QCA8072; QCA8075; QCA8080; QCA8081; QCA8082; QCA8084; QCA8085; QCA8337; QCA8386; QCA8695AU; QCA9888; QCA9889; QCC2070; QCC2073; QCC2076; QCC6705; QCC710; QCF8000; QCF8001; QCM2290; QCM4290; QCM4325; QCM4490; QCM5430; QCM6125; QCM6490; QCN5021; QCN5022; QCN5024; QCN5052; QCN5054; QCN5064; QCN5122; QCN5124; QCN5152; QCN5154; QCN5164; QCN5550; QCN6023; QCN6024; QCN6122; QCN6132; QCN6224; QCN6274; QCN6402; QCN6412; QCN6422; QCN6432; QCN7605; QCN7606; QCN9000; QCN9001; QCN9002; QCN9003; QCN9011; QCN9012; QCN9022; QCN9024; QCN9070; QCN9100; QCN9274; QCS2290; QCS4290; QCS4490; QCS6690; QCS8550; QFW7114; QFW7124; QLN1083BD; QLN1086BD; QMP1000; QMP2001; QPA1083BD; QPA1086BD; Qualcomm FastConnect 8800 Mobile Connectivity System; Qualcomm Video Collaboration VC1 Platform; Qualcomm Video Collaboration VC3 Platform; Qualcomm Video Collaboration VC5 Platform; QXM1083; QXM1086; QXM1093; QXM1094; QXM1095; QXM1096; Robotics RB2 Platform; Robotics RB5 Platform; SA4150P; SA4155P; SA510M; SA6145P; SA6150P; SA6155; SA6155P; SA7255P; SA7775P; SA8145P; SA8150P; SA8155; SA8155P; SA8195P; SA8255P; SA8295P; SA8620P; SA8770P; SA9000P; SAR1165P; SAR2130P; SC8380XP; SD 8 Gen1 5G; SD662; SD865 5G; SDA660; SDX65M; SDX81; SM4850; SM4850P; SM4875; SM6225P; SM6250; SM6450P; SM6475P; SM6475Q; SM6650P; SM6850; SM7325P; SM7435; SM7435P; SM7525; SM7550; SM7550P; SM7635P; SM7675; SM7675P; SM7750P; SM8475P; SM8550P; SM8635; SM8635P; SM8650Q; SM8735P; SM8750P; SM8845P; SM8950; SM8950P; SM8975; SM8975P; Smart Audio 400 Platform; Snapdragon 4 Gen 1 Mobile Platform; Snapdragon 4 Gen 2 Mobile Platform; Snapdragon 460 Mobile Platform; Snapdragon 480 5G Mobile Platform; Snapdragon 480+ 5G Mobile Platform; Snapdragon 6 Gen 1 Mobile Platform; Snapdragon 6 Gen 3 Mobile Platform; Snapdragon 6 Gen 4 Mobile Platform; Snapdragon 660 Mobile Platform; Snapdragon 662 Mobile Platform; Snapdragon 680 4G Mobile Platform; Snapdragon 685 4G Mobile Platform; Snapdragon 690 5G Mobile Platform; Snapdragon 695 5G Mobile Platform; Snapdragon 7 Gen 1 Mobile Platform; Snapdragon 7 Gen 4 Mobile Platform; Snapdragon 7+ Gen 2 Mobile Platform; Snapdragon 778G 5G Mobile Platform; Snapdragon 778G+ 5G Mobile Platform; Snapdragon 782G Mobile Platform; Snapdragon 7c Compute Platform; Snapdragon 7c Gen 2 Compute Platform "Rennell Pro"; Snapdragon 7c+ Gen 3 Compute; Snapdragon 7s Gen 3 Mobile Platform; Snapdragon 8 Elite; Snapdragon 8 Elite Gen 5; Snapdragon 8 Gen 1 Mobile Platform; Snapdragon 8 Gen 2 Mobile Platform; Snapdragon 8 Gen 3 Mobile Platform; Snapdragon 8 Gen 5; Snapdragon 8+ Gen 1 Mobile Platform; Snapdragon 8+ Gen 2 Mobile Platform; Snapdragon 865 5G Mobile Platform; Snapdragon 865+ 5G Mobile Platform; Snapdragon 870 5G Mobile Platform; Snapdragon 888 5G Mobile Platform; Snapdragon 888+ 5G Mobile Platform; Snapdragon 8c Compute Platform "Poipu Lite"; Snapdragon 8c Compute Platform (SC8180XP-AD) "Poipu Lite"; Snapdragon 8cx Compute Platform; Snapdragon 8cx Compute Platform "Poipu Pro"; Snapdragon 8cx Gen 2 5G Compute Platform; Snapdragon 8cx Gen 2 5G Compute Platform "Poipu Pro"; Snapdragon 8cx Gen 3 Compute Platform; Snapdragon AR1 Gen 1 Platform; Snapdragon AR1+ Gen 1 Platform; Snapdragon Auto 5G Modem-RF; Snapdragon Auto 5G Modem-RF Gen 2; Snapdragon Ride Elite; Snapdragon W5+ Gen 1 Wearable Platform; Snapdragon X2 Elite; Snapdragon X35 5G Modem-RF System; Snapdragon X53 5G Modem-RF System; Snapdragon X55 5G Modem-RF System; Snapdragon X65 5G Modem-RF System; Snapdragon X72 5G Modem-RF System; Snapdragon X75 5G Modem-RF System; Snapdragon XR2 5G Platform; Snapdragon XR2+ Gen 1 Platform; SnapdragonAuto 4GModem; Snapdragon Cockpit Elite; Snapdragon Reality Elite Platform; SRV1H; SRV1M; SW-only; SW5100; SW5100P; SXR2230P; SXR2250P; Trestles; Vision Intelligence 400 Platform; WCD9335; WCD9340; WCD9341; WCD9360; WCD9370; WCD9371; WCD9375; WCD9378; WCD9378C; WCD9380; WCD9385; WCD9390; WCD9395; WCN3910; WCN3950; WCN3980; WCN3988; WCN3990; WCN6450; WCN6650; WCN6755; WCN7760; WCN7860; WCN7861; WCN7880; WCN7881; WCN8841; WSA8810; WSA8815; WSA8830; WSA8832; WSA8835; WSA8840; WSA8845; WSA8845H; WSA8850; WSA8850W; WSA8855C; X1E80100; XRV7209; XRV9209

Вид слабост

• CWE-126 Четене след края на буфера

История

Други уязвимости в Qualcomm, Inc. Snapdragon

• 7.8CVE-2026-57559
• 7.8CVE-2026-57555
• 7.8CVE-2026-57554
• 7.5CVE-2026-57546
• 7.8CVE-2026-57545

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-25275
• https://nvd.nist.gov/vuln/detail/CVE-2026-25275
• https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2026-bulletin.html