CVE-2026-25292
📛 CVE Title
Improper Validation of Syntactic Correctness of Input in Automotive Linux OS
Description
Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration.
Overview
- State
- PUBLISHED
- Assigner (CNA)
- qualcomm
- CVSS severity
- HIGH
- CVSS score
- 7.6 / 10
- CVSS vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H- Effective score
- 7.6 / 10 HIGH source: CNA overview
- CWE(s)
-
CWE-1286 - Reserved
- 2026-02-02
- Published
- 2026-08-04 15:07 UTC
- Last updated
- 2026-08-04 15:51 UTC
- Source
- https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/25xxx/CVE-2026-25292.json
- Linked Threat
- CVE-2026-25292 — Improper Validation of Syntactic Correctness of Input in Automotive Linux OS
Affected products (1)
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Qualcomm, Inc. | Snapdragon |
AR8035 (affected),
CQ7790 (affected),
CQ8725S (affected),
FastConnect 6200 (affected),
FastConnect 6700 (affected),
FastConnect 6900 (affected),
FastConnect 7800 (affected),
Flight RB5 5G Platform (affected),
FWA Gen 3 Ultra Platform (affected),
FWA Gen 5 Elite Platform (affected),
G1 Gen 1 (affected),
G2 Gen 1 (affected),
IQ10 Series (affected),
Kalpeni (affected),
Kobuk (affected),
LeMans_AU_LGIT (affected),
LeMansAU (affected),
Milos_IOT (affected),
Orne (affected),
Palawan25 (affected),
Pandeiro (affected),
QAM8255P (affected),
QAM8295P (affected),
QAM8397P (affected),
QAM8620P (affected),
QAM8797P (affected),
QAMSRV1H (affected),
QAMSRV1M (affected),
QCA6174A (affected),
QCA6391 (affected),
QCA6564AU (affected),
QCA6574 (affected),
QCA6574A (affected),
QCA6574AU (affected),
QCA6584AU (affected),
QCA6595 (affected),
QCA6595AU (affected),
QCA6678AQ (affected),
QCA6688AQ (affected),
QCA6696 (affected),
QCA6698AQ (affected),
QCA6698AU (affected),
QCA6797AQ (affected),
QCA8081 (affected),
QCA8337 (affected),
QCA8386 (affected),
QCA8695AU (affected),
QCA9367 (affected),
QCA9377 (affected),
QCC710 (affected),
QCF8001 (affected),
QCM2290 (affected),
QCM4290 (affected),
QCM4325 (affected),
QCM4490 (affected),
QCM6125 (affected),
QCM6490 (affected),
QCM8838 (affected),
QCN6224 (affected),
QCN6274 (affected),
QCN9011 (affected),
QCN9012 (affected),
QCS2290 (affected),
QCS410 (affected),
QCS4290 (affected),
QCS4490 (affected),
QCS6690 (affected),
QCS8550 (affected),
QDU1000 (affected),
QDU1110 (affected),
QDU1210 (affected),
QDX1010 (affected),
QDX1011 (affected),
QEP8111 (affected),
QFW7114 (affected),
QFW7124 (affected),
QLN1083BD (affected),
QLN1086BD (affected),
QMB715 (affected),
QMP1000 (affected),
QPA1083BD (affected),
QPA1086BD (affected),
QRB5165N (affected),
QRU1032 (affected),
Qualcomm Dragonwing QRU100 Platform (affected),
Qualcomm Dragonwing X100 Accelerator Card (affected),
Qualcomm Video Collaboration VC1 Platform (affected),
Qualcomm Video Collaboration VC3 Platform (affected),
Qualcomm Video Collaboration VC5 Platform (affected),
QXM1083 (affected),
QXM1086 (affected),
QXM1093 (affected),
QXM1094 (affected),
QXM1095 (affected),
QXM1096 (affected),
Robotics RB5 Platform (affected),
SA4150P (affected),
SA510M (affected),
SA6145P (affected),
SA6150P (affected),
SA6155P (affected),
SA7255P (affected),
SA7775P (affected),
SA8145P (affected),
SA8150P (affected),
SA8155P (affected),
SA8195P (affected),
SA8255P (affected),
SA8295P (affected),
SA8620P (affected),
SA8770P (affected),
SA9000P (affected),
SAR1165P (affected),
SD662 (affected),
SD865 5G (affected),
SDA660 (affected),
SDR753 (affected),
SDX81 (affected),
SM6225P (affected),
SM6370 (affected),
SM8550P (affected),
SM8750P (affected),
Snapdragon 4 Gen 1 Mobile Platform (affected),
Snapdragon 460 Mobile Platform (affected),
Snapdragon 480 5G Mobile Platform (affected),
Snapdragon 480+ 5G Mobile Platform (affected),
Snapdragon 660 Mobile Platform (affected),
Snapdragon 662 Mobile Platform (affected),
Snapdragon 680 4G Mobile Platform (affected),
Snapdragon 685 4G Mobile Platform (affected),
Snapdragon 695 5G Mobile Platform (affected),
Snapdragon 7 Gen 4 Mobile Platform (affected),
Snapdragon 8 Elite (affected),
Snapdragon 8 Elite Gen 5 (affected),
Snapdragon 8 Gen 2 Mobile Platform (affected),
Snapdragon 8 Gen 3 Mobile Platform (affected),
Snapdragon 8+ Gen 2 Mobile Platform (affected),
Snapdragon AR1 Gen 1 Platform (affected),
Snapdragon AR1+ Gen 1 Platform (affected),
Snapdragon Auto 5G Modem-RF Gen 2 (affected),
Snapdragon W5+ Gen 1 Wearable Platform (affected),
Snapdragon X32 5G Modem-RF System (affected),
Snapdragon X35 5G Modem-RF System (affected),
Snapdragon X72 5G Modem-RF System (affected),
Snapdragon X75 5G Modem-RF System (affected),
Snapdragon XR2 5G Platform (affected),
Snapdragon XR2+ Gen 1 Platform (affected),
Snapdragon Wear Elite platform (affected),
SRV1H (affected),
SRV1L (affected),
SRV1M (affected),
SSG2115P (affected),
SSG2125P (affected),
SW5100 (affected),
SW5100P (affected),
SXR1230P (affected),
SXR2330P (affected),
SXR2350P (affected),
Themisto (affected),
WCD9335 (affected),
WCD9340 (affected),
WCD9341 (affected),
WCD9370 (affected),
WCD9375 (affected),
WCD9378 (affected),
WCD9380 (affected),
WCD9385 (affected),
WCD9390 (affected),
WCD9395 (affected),
WCN3910 (affected),
WCN3950 (affected),
WCN3980 (affected),
WCN3988 (affected),
WCN3990 (affected),
WCN6450 (affected),
WCN6755 (affected),
WCN7860 (affected),
WCN7861 (affected),
WCN7880 (affected),
WCN7881 (affected),
WSA8810 (affected),
WSA8815 (affected),
WSA8830 (affected),
WSA8832 (affected),
WSA8835 (affected),
WSA8840 (affected),
WSA8845 (affected),
WSA8845H (affected),
X1E80100 (affected),
XRV7209 (affected),
XRV9209 (affected)
|
Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon WBC, Snapdragon Wearables |
Vendor references (1)
References embedded in the original CVE record by the assigning CNA.
Web references (0)
DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.
No web references attached yet.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.
Raw JSON
The full cvelistV5 record. Download as CVE-2026-25292.json.
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-25292",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-04T15:51:26.416451Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-04T15:51:32.278Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Snapdragon Auto",
"Snapdragon Compute",
"Snapdragon Consumer IOT",
"Snapdragon Industrial IOT",
"Snapdragon Mobile",
"Snapdragon WBC",
"Snapdragon Wearables"
],
"product": "Snapdragon",
"vendor": "Qualcomm, Inc.",
"versions": [
{
"status": "affected",
"version": "AR8035"
},
{
"status": "affected",
"version": "CQ7790"
},
{
"status": "affected",
"version": "CQ8725S"
},
{
"status": "affected",
"version": "FastConnect 6200"
},
{
"status": "affected",
"version": "FastConnect 6700"
},
{
"status": "affected",
"version": "FastConnect 6900"
},
{
"status": "affected",
"version": "FastConnect 7800"
},
{
"status": "affected",
"version": "Flight RB5 5G Platform"
},
{
"status": "affected",
"version": "FWA Gen 3 Ultra Platform"
},
{
"status": "affected",
"version": "FWA Gen 5 Elite Platform"
},
{
"status": "affected",
"version": "G1 Gen 1"
},
{
"status": "affected",
"version": "G2 Gen 1"
},
{
"status": "affected",
"version": "IQ10 Series"
},
{
"status": "affected",
"version": "Kalpeni"
},
{
"status": "affected",
"version": "Kobuk"
},
{
"status": "affected",
"version": "LeMans_AU_LGIT"
},
{
"status": "affected",
"version": "LeMansAU"
},
{
"status": "affected",
"version": "Milos_IOT"
},
{
"status": "affected",
"version": "Orne"
},
{
"status": "affected",
"version": "Palawan25"
},
{
"status": "affected",
"version": "Pandeiro"
},
{
"status": "affected",
"version": "QAM8255P"
},
{
"status": "affected",
"version": "QAM8295P"
},
{
"status": "affected",
"version": "QAM8397P"
},
{
"status": "affected",
"version": "QAM8620P"
},
{
"status": "affected",
"version": "QAM8797P"
},
{
"status": "affected",
"version": "QAMSRV1H"
},
{
"status": "affected",
"version": "QAMSRV1M"
},
{
"status": "affected",
"version": "QCA6174A"
},
{
"status": "affected",
"version": "QCA6391"
},
{
"status": "affected",
"version": "QCA6564AU"
},
{
"status": "affected",
"version": "QCA6574"
},
{
"status": "affected",
"version": "QCA6574A"
},
{
"status": "affected",
"version": "QCA6574AU"
},
{
"status": "affected",
"version": "QCA6584AU"
},
{
"status": "affected",
"version": "QCA6595"
},
{
"status": "affected",
"version": "QCA6595AU"
},
{
"status": "affected",
"version": "QCA6678AQ"
},
{
"status": "affected",
"version": "QCA6688AQ"
},
{
"status": "affected",
"version": "QCA6696"
},
{
"status": "affected",
"version": "QCA6698AQ"
},
{
"status": "affected",
"version": "QCA6698AU"
},
{
"status": "affected",
"version": "QCA6797AQ"
},
{
"status": "affected",
"version": "QCA8081"
},
{
"status": "affected",
"version": "QCA8337"
},
{
"status": "affected",
"version": "QCA8386"
},
{
"status": "affected",
"version": "QCA8695AU"
},
{
"status": "affected",
"version": "QCA9367"
},
{
"status": "affected",
"version": "QCA9377"
},
{
"status": "affected",
"version": "QCC710"
},
{
"status": "affected",
"version": "QCF8001"
},
{
"status": "affected",
"version": "QCM2290"
},
{
"status": "affected",
"version": "QCM4290"
},
{
"status": "affected",
"version": "QCM4325"
},
{
"status": "affected",
"version": "QCM4490"
},
{
"status": "affected",
"version": "QCM6125"
},
{
"status": "affected",
"version": "QCM6490"
},
{
"status": "affected",
"version": "QCM8838"
},
{
"status": "affected",
"version": "QCN6224"
},
{
"status": "affected",
"version": "QCN6274"
},
{
"status": "affected",
"version": "QCN9011"
},
{
"status": "affected",
"version": "QCN9012"
},
{
"status": "affected",
"version": "QCS2290"
},
{
"status": "affected",
"version": "QCS410"
},
{
"status": "affected",
"version": "QCS4290"
},
{
"status": "affected",
"version": "QCS4490"
},
{
"status": "affected",
"version": "QCS6690"
},
{
"status": "affected",
"version": "QCS8550"
},
{
"status": "affected",
"version": "QDU1000"
},
{
"status": "affected",
"version": "QDU1110"
},
{
"status": "affected",
"version": "QDU1210"
},
{
"status": "affected",
"version": "QDX1010"
},
{
"status": "affected",
"version": "QDX1011"
},
{
"status": "affected",
"version": "QEP8111"
},
{
"status": "affected",
"version": "QFW7114"
},
{
"status": "affected",
"version": "QFW7124"
},
{
"status": "affected",
"version": "QLN1083BD"
},
{
"status": "affected",
"version": "QLN1086BD"
},
{
"status": "affected",
"version": "QMB715"
},
{
"status": "affected",
"version": "QMP1000"
},
{
"status": "affected",
"version": "QPA1083BD"
},
{
"status": "affected",
"version": "QPA1086BD"
},
{
"status": "affected",
"version": "QRB5165N"
},
{
"status": "affected",
"version": "QRU1032"
},
{
"status": "affected",
"version": "Qualcomm Dragonwing QRU100 Platform"
},
{
"status": "affected",
"version": "Qualcomm Dragonwing X100 Accelerator Card"
},
{
"status": "affected",
"version": "Qualcomm Video Collaboration VC1 Platform"
},
{
"status": "affected",
"version": "Qualcomm Video Collaboration VC3 Platform"
},
{
"status": "affected",
"version": "Qualcomm Video Collaboration VC5 Platform"
},
{
"status": "affected",
"version": "QXM1083"
},
{
"status": "affected",
"version": "QXM1086"
},
{
"status": "affected",
"version": "QXM1093"
},
{
"status": "affected",
"version": "QXM1094"
},
{
"status": "affected",
"version": "QXM1095"
},
{
"status": "affected",
"version": "QXM1096"
},
{
"status": "affected",
"version": "Robotics RB5 Platform"
},
{
"status": "affected",
"version": "SA4150P"
},
{
"status": "affected",
"version": "SA510M"
},
{
"status": "affected",
"version": "SA6145P"
},
{
"status": "affected",
"version": "SA6150P"
},
{
"status": "affected",
"version": "SA6155P"
},
{
"status": "affected",
"version": "SA7255P"
},
{
"status": "affected",
"version": "SA7775P"
},
{
"status": "affected",
"version": "SA8145P"
},
{
"status": "affected",
"version": "SA8150P"
},
{
"status": "affected",
"version": "SA8155P"
},
{
"status": "affected",
"version": "SA8195P"
},
{
"status": "affected",
"version": "SA8255P"
},
{
"status": "affected",
"version": "SA8295P"
},
{
"status": "affected",
"version": "SA8620P"
},
{
"status": "affected",
"version": "SA8770P"
},
{
"status": "affected",
"version": "SA9000P"
},
{
"status": "affected",
"version": "SAR1165P"
},
{
"status": "affected",
"version": "SD662"
},
{
"status": "affected",
"version": "SD865 5G"
},
{
"status": "affected",
"version": "SDA660"
},
{
"status": "affected",
"version": "SDR753"
},
{
"status": "affected",
"version": "SDX81"
},
{
"status": "affected",
"version": "SM6225P"
},
{
"status": "affected",
"version": "SM6370"
},
{
"status": "affected",
"version": "SM8550P"
},
{
"status": "affected",
"version": "SM8750P"
},
{
"status": "affected",
"version": "Snapdragon 4 Gen 1 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 460 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 480 5G Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 480+ 5G Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 660 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 662 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 680 4G Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 685 4G Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 695 5G Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 7 Gen 4 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 8 Elite"
},
{
"status": "affected",
"version": "Snapdragon 8 Elite Gen 5"
},
{
"status": "affected",
"version": "Snapdragon 8 Gen 2 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 8 Gen 3 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 8+ Gen 2 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon AR1 Gen 1 Platform"
},
{
"status": "affected",
"version": "Snapdragon AR1+ Gen 1 Platform"
},
{
"status": "affected",
"version": "Snapdragon Auto 5G Modem-RF Gen 2"
},
{
"status": "affected",
"version": "Snapdragon W5+ Gen 1 Wearable Platform"
},
{
"status": "affected",
"version": "Snapdragon X32 5G Modem-RF System"
},
{
"status": "affected",
"version": "Snapdragon X35 5G Modem-RF System"
},
{
"status": "affected",
"version": "Snapdragon X72 5G Modem-RF System"
},
{
"status": "affected",
"version": "Snapdragon X75 5G Modem-RF System"
},
{
"status": "affected",
"version": "Snapdragon XR2 5G Platform"
},
{
"status": "affected",
"version": "Snapdragon XR2+ Gen 1 Platform"
},
{
"status": "affected",
"version": "Snapdragon Wear Elite platform"
},
{
"status": "affected",
"version": "SRV1H"
},
{
"status": "affected",
"version": "SRV1L"
},
{
"status": "affected",
"version": "SRV1M"
},
{
"status": "affected",
"version": "SSG2115P"
},
{
"status": "affected",
"version": "SSG2125P"
},
{
"status": "affected",
"version": "SW5100"
},
{
"status": "affected",
"version": "SW5100P"
},
{
"status": "affected",
"version": "SXR1230P"
},
{
"status": "affected",
"version": "SXR2330P"
},
{
"status": "affected",
"version": "SXR2350P"
},
{
"status": "affected",
"version": "Themisto"
},
{
"status": "affected",
"version": "WCD9335"
},
{
"status": "affected",
"version": "WCD9340"
},
{
"status": "affected",
"version": "WCD9341"
},
{
"status": "affected",
"version": "WCD9370"
},
{
"status": "affected",
"version": "WCD9375"
},
{
"status": "affected",
"version": "WCD9378"
},
{
"status": "affected",
"version": "WCD9380"
},
{
"status": "affected",
"version": "WCD9385"
},
{
"status": "affected",
"version": "WCD9390"
},
{
"status": "affected",
"version": "WCD9395"
},
{
"status": "affected",
"version": "WCN3910"
},
{
"status": "affected",
"version": "WCN3950"
},
{
"status": "affected",
"version": "WCN3980"
},
{
"status": "affected",
"version": "WCN3988"
},
{
"status": "affected",
"version": "WCN3990"
},
{
"status": "affected",
"version": "WCN6450"
},
{
"status": "affected",
"version": "WCN6755"
},
{
"status": "affected",
"version": "WCN7860"
},
{
"status": "affected",
"version": "WCN7861"
},
{
"status": "affected",
"version": "WCN7880"
},
{
"status": "affected",
"version": "WCN7881"
},
{
"status": "affected",
"version": "WSA8810"
},
{
"status": "affected",
"version": "WSA8815"
},
{
"status": "affected",
"version": "WSA8830"
},
{
"status": "affected",
"version": "WSA8832"
},
{
"status": "affected",
"version": "WSA8835"
},
{
"status": "affected",
"version": "WSA8840"
},
{
"status": "affected",
"version": "WSA8845"
},
{
"status": "affected",
"version": "WSA8845H"
},
{
"status": "affected",
"version": "X1E80100"
},
{
"status": "affected",
"version": "XRV7209"
},
{
"status": "affected",
"version": "XRV9209"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "PHYSICAL",
"availabilityImpact": "HIGH",
"baseScore": 7.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1286",
"description": "CWE-1286: Improper Validation of Syntactic Correctness of Input",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-04T15:07:24.305Z",
"orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
"shortName": "qualcomm"
},
"references": [
{
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-bulletin.html"
}
],
"title": "Improper Validation of Syntactic Correctness of Input in Automotive Linux OS"
}
},
"cveMetadata": {
"assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
"assignerShortName": "qualcomm",
"cveId": "CVE-2026-25292",
"datePublished": "2026-08-04T15:07:24.305Z",
"dateReserved": "2026-02-02T04:19:00.943Z",
"dateUpdated": "2026-08-04T15:51:32.278Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}