CVE-2026-25262

🗓️ 22 Sep 2026 09:45:18Reported by qualcommType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 361 Views

Write-what-where memory corruption in Primary Bootloader via crafted ELF file.

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	Qualcomm Buffer Overflow	8 Jul 202600:00	–	bdu_fstec
Circl	CVE-2026-25262	24 Apr 202614:30	–	circl
Cvelist	CVE-2026-25262 Write-what-where Condition in Primary Bootloader	22 Sep 202609:45	–	cvelist
EUVD	EUVD-2026-84346	22 Sep 202609:45	–	euvd
Kitploit	cve-2026-25262-sm8450-research — Updated!	20 Aug 202607:59	–	kitploit
Kitploit	cve-2026-25262-sm8450-research	24 Oct 202603:09	–	kitploit
NVD	CVE-2026-25262	22 Sep 202610:17	–	nvd
Positive Technologies	PT-2026-34740	14 Mar 202600:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2026-25262: Write-what-where Condition	22 Sep 202600:00	–	rapid7
Vulnrichment	CVE-2026-25262 Write-what-where Condition in Primary Bootloader	22 Sep 202609:45	–	vulnrichment

NVD

Vulners

Node

AND

qualcomm mdm9207_firmwareMatch-

qualcomm mdm9207Match-

Node

AND

qualcomm mdm9655_firmwareMatch-

qualcomm mdm9655Match-

Node

AND

qualcomm mdm9665_firmwareMatch-

qualcomm mdm9665Match-

Node

AND

qualcomm msm8909_firmwareMatch-

qualcomm msm8909Match-

Node

AND

qualcomm msm8916_firmwareMatch-

qualcomm msm8916Match-

Node

AND

qualcomm msm8952_firmwareMatch-

qualcomm msm8952Match-

Node

AND

qualcomm sdx50_firmwareMatch-

qualcomm sdx50Match-

Node

AND

qualcomm mdm9645_firmwareMatch-

qualcomm mdm9645Match-

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Snapdragon Auto",
      "Snapdragon Industrial IOT",
      "Snapdragon IoT",
      "Snapdragon Mobile",
      "Snapdragon Voice & Music",
      "Snapdragon Wearables"
    ],
    "product": "Snapdragon",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "MDM9x07"
      },
      {
        "status": "affected",
        "version": "MDM9x45"
      },
      {
        "status": "affected",
        "version": "MDM9x55"
      },
      {
        "status": "affected",
        "version": "MDM9x65"
      },
      {
        "status": "affected",
        "version": "MSM8909"
      },
      {
        "status": "affected",
        "version": "MSM8916"
      },
      {
        "status": "affected",
        "version": "MSM8952"
      },
      {
        "status": "affected",
        "version": "SDX50"
      }
    ]
  }
]

Source	Link
docs	www.docs.qualcomm.com/product/publicresources/securitybulletin/may-2026-bulletin.html

06 Oct 2026 15:34Current

7High risk

Vulners AI Score7

CVSS 3.16.3 - 6.9

EPSS0.00135

SSVC

CWE-123