CVE-2026-25302: Qualcomm, Inc. Snapdragon, слаба криптография

Описание

Оригинално описание

Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.

Засегнати продукти

• Qualcomm, Inc. Snapdragon: 5G Fixed Wireless Access Platform; AR8035; Cologne; CQ7790; CQ8725S; CQ8750M; CSRA6620; CSRA6640; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; FWA Gen 3 Ultra Platform; FWA Gen 5 Elite Platform; G1 Gen 1; G2 Gen 1; G3x Gen 2; IPQ9048; IPQ9570; IPQ9574; IQ10 Series; IQ6 Series Platform; IQ8 Series Platform; IQ9 Series Platform; IQX5121; Kalpeni; Kobuk; LeMans_AU_LGIT; LeMansAU; Marina; MBM415; MBM715; Milos; Monaco_IOT; NPro A8 Elite Platform; Orne; Palawan25; Pandeiro; Q-2390; Q-4390; QAM8255P; QAM8295P; QAM8620P; QAMSRV1H; QAMSRV1M; QCA0000; QCA6174A; QCA6391; QCA6421; QCA6426; QCA6431; QCA6436; QCA6564AU; QCA6574A; QCA6574AU; QCA6584AU; QCA6595; QCA6595AU; QCA6678AQ; QCA6688AQ; QCA6696; QCA6698AQ; QCA6698AU; QCA6797AQ; QCA8075; QCA8080; QCA8081; QCA8082; QCA8084; QCA8085; QCA8101; QCA8102; QCA8111; QCA8112; QCA8337; QCA8384; QCA8385; QCA8386; QCA8695AU; QCC2070; QCC6705; QCC710; QCF8001; QCM2290; QCM4290; QCM4325; QCM5430; QCM6490; QCM6650; QCM8550; QCM8838; QCN5124; QCN5224; QCN6024; QCN6224; QCN6274; QCN7606; QCN9011; QCN9012; QCN9024; QCN9274; QCS2290; QCS4290; QCS8550; QDU1000; QDU1110; QDU1210; QDX1010; QDX1011; QEP8111; QFW7114; QFW7124; QFW7224; QLN1083BD; QLN1086BD; QMP1000; QMX82L; QMX85L; QPA1083BD; QPA1086BD; QRB5165N; QRU1032; QSM8250; QSM8350; Qualcomm Dragonwing IQ-X; Qualcomm Dragonwing Q-6690; Qualcomm Dragonwing Q-7790; Qualcomm Dragonwing Q-8845; Qualcomm Dragonwing QCM4490; Qualcomm Dragonwing QRB5165; Qualcomm Dragonwing QRU100 Platform; Qualcomm Dragonwing X100 Accelerator Card; Qualcomm Video Collaboration VC3 Platform; Qualcomm Video Collaboration VC5 Platform; QXM1083; QXM1086; QXM1093; QXM1094; QXM1095; QXM1096; Robotics RB2 Platform; Robotics RB5 Platform; SA510M; SA7255P; SA7775P; SA8255P; SA8295P; SA8530P; SA8540P; SA8620P; SA8770P; SA9000P; SAR1165P; SAR2130P; SC8380XP; SD 8 Gen1 5G; SD460; SD662; SD865 5G; SD888; SDR753; SDX61; SDX71M; SDX81; SM4125; SM6225P; SM6370; SM6650P; SM7250P; SM7315; SM7325P; SM7635P; SM7675; SM7675P; SM8550P; SM8635; SM8635P; SM8650Q; SM8750P; Smart Audio 400 Platform; Snapdragon 4 Gen 1 Mobile Platform; Snapdragon 4 Gen 2 Mobile Platform; Snapdragon 460 Mobile Platform; Snapdragon 480 5G Mobile Platform; Snapdragon 480+ 5G Mobile Platform; Snapdragon 6 Gen 4 Mobile Platform; Snapdragon 662 Mobile Platform; Snapdragon 680 4G Mobile Platform; Snapdragon 685 4G Mobile Platform; Snapdragon 690 5G Mobile Platform; Snapdragon 695 5G Mobile Platform; Snapdragon 7 Gen 4 Mobile Platform; Snapdragon 750G 5G Mobile Platform; Snapdragon 765 5G Mobile Platform; Snapdragon 765G 5G Mobile Platform; Snapdragon 768G 5G Mobile Platform; Snapdragon 778G 5G Mobile Platform; Snapdragon 778G+ 5G Mobile Platform; Snapdragon 780G 5G Mobile Platform; Snapdragon 782G Mobile Platform; Snapdragon 7c+ Gen 3 Compute; Snapdragon 7s Gen 3 Mobile Platform; Snapdragon 8 Elite; Snapdragon 8 Elite Gen 5; Snapdragon 8 Gen 1 Mobile Platform; Snapdragon 8 Gen 2 Mobile Platform; Snapdragon 8 Gen 3 Mobile Platform; Snapdragon 8+ Gen 1 Mobile Platform; Snapdragon 8+ Gen 2 Mobile Platform; Snapdragon 865 5G Mobile Platform; Snapdragon 865+ 5G Mobile Platform; Snapdragon 870 5G Mobile Platform; Snapdragon 888 5G Mobile Platform; Snapdragon 888+ 5G Mobile Platform; Snapdragon 8cx Gen 3 Compute Platform; Snapdragon AR1 Gen 1 Platform; Snapdragon AR1+ Gen 1 Platform; Snapdragon Auto 5G Modem-RF Gen 2; Snapdragon C Platform; Snapdragon Ride Elite; Snapdragon W5+ Gen 1 Wearable Platform; Snapdragon X2 Elite; Snapdragon X32 5G Modem-RF System; Snapdragon X35 5G Modem-RF System; Snapdragon X53 5G Modem-RF System; Snapdragon X55 5G Modem-RF System; Snapdragon X62 5G Modem-RF System; Snapdragon X65 5G Modem-RF System; Snapdragon X70 Modem-RF System; Snapdragon X72 5G Modem-RF System; Snapdragon X75 5G Modem-RF System; Snapdragon X80 5G Modem-RF System; Snapdragon XR2 5G Platform; Snapdragon XR2+ Gen 1 Platform; Snapdragon Cockpit Elite; Snapdragon Reality Elite Platform; Snapdragon Wear Elite platform; SRV1H; SRV1L; SRV1M; SSG2115P; SSG2125P; SW5100; SW5100P; SW-only; SXR1230P; SXR2130; SXR2230P; SXR2250P; TalynPlus; Themisto; Trestles; WCD9335; WCD9340; WCD9370; WCD9375; WCD9378; WCD9378C; WCD9380; WCD9385; WCD9390; WCD9395; WCN3910; WCN3950; WCN3980; WCN3988; WCN6450; WCN6650; WCN6740; WCN6755; WCN7860; WCN7861; WCN7880; WCN7881; WSA8810; WSA8815; WSA8830; WSA8832; WSA8835; WSA8840; WSA8845; WSA8845H; X1E80100; XRV7209; XRV9209

Вид слабост

• CWE-347 Неправилна проверка на криптографски подпис

История

Други уязвимости в Qualcomm, Inc. Snapdragon

• 7.8CVE-2026-57559
• 7.8CVE-2026-57555
• 7.8CVE-2026-57554
• 7.5CVE-2026-57546
• 7.8CVE-2026-57545

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-25302
• https://nvd.nist.gov/vuln/detail/CVE-2026-25302
• https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2026-bulletin.html