CVE-2026-25268

🗓️ 06 Jul 2026 20:09:41Reported by qualcommType

CVE-2026-25268: stack-based overflow in WLAN host during channel switching from invalid HT40 layouts.

Reporter	Title	Published	Views	Family All 7
ATTACKERKB	CVE-2026-25268	6 Jul 202620:09	–	attackerkb
Circl	CVE-2026-25268	6 Jul 202621:16	–	circl
Cvelist	CVE-2026-25268 Stack-based Buffer Overflow in WLAN Host	6 Jul 202620:09	–	cvelist
EUVD	EUVD-2026-41932	6 Jul 202620:09	–	euvd
NVD	CVE-2026-25268	6 Jul 202621:16	–	nvd
Positive Technologies	PT-2026-55994	6 Jul 202600:00	–	ptsecurity
Vulnrichment	CVE-2026-25268 Stack-based Buffer Overflow in WLAN Host	6 Jul 202620:09	–	vulnrichment

NVD

Vulners

Node

AND

qualcomm wsa8835_firmwareMatch-

qualcomm wsa8835Match-

Node

AND

qualcomm 5g_fixed_wireless_access_platform_firmwareMatch-

qualcomm 5g_fixed_wireless_access_platformMatch-

Node

AND

qualcomm ar8035_firmwareMatch-

qualcomm ar8035Match-

Node

AND

qualcomm cq7790_firmwareMatch-

qualcomm cq7790Match-

Node

AND

qualcomm cq8725s_firmwareMatch-

qualcomm cq8725sMatch-

Node

AND

qualcomm qca4024_firmwareMatch-

qualcomm qca4024Match-

Node

AND

qualcomm qca6174a_firmwareMatch-

qualcomm qca6174aMatch-

Node

AND

qualcomm qca8075_firmwareMatch-

qualcomm qca8075Match-

Node

AND

qualcomm qca8080_firmwareMatch-

qualcomm qca8080Match-

Node

AND

qualcomm qca8081_firmwareMatch-

qualcomm qca8081Match-

Node

AND

qualcomm qca8082_firmwareMatch-

qualcomm qca8082Match-

Node

AND

qualcomm qca8084_firmwareMatch-

qualcomm qca8084Match-

Node

AND

qualcomm qca8085_firmwareMatch-

qualcomm qca8085Match-

Node

AND

qualcomm qca8101_firmwareMatch-

qualcomm qca8101Match-

Node

AND

qualcomm qca8102_firmwareMatch-

qualcomm qca8102Match-

Node

AND

qualcomm qca8111_firmwareMatch-

qualcomm qca8111Match-

Node

AND

qualcomm qca8112_firmwareMatch-

qualcomm qca8112Match-

Node

AND

qualcomm qca8337_firmwareMatch-

qualcomm qca8337Match-

Node

AND

qualcomm qca8384_firmwareMatch-

qualcomm qca8384Match-

Node

AND

qualcomm qca8385_firmwareMatch-

qualcomm qca8385Match-

Node

AND

qualcomm qca8386_firmwareMatch-

qualcomm qca8386Match-

Node

AND

qualcomm qca9888_firmwareMatch-

qualcomm qca9888Match-

Node

AND

qualcomm qca9889_firmwareMatch-

qualcomm qca9889Match-

Node

AND

qualcomm qcc710_firmwareMatch-

qualcomm qcc710Match-

Node

AND

qualcomm qcf8000_firmwareMatch-

qualcomm qcf8000Match-

Node

AND

qualcomm qcf8001_firmwareMatch-

qualcomm qcf8001Match-

Node

AND

qualcomm qcm5430_firmwareMatch-

qualcomm qcm5430Match-

Node

AND

qualcomm qcm6490_firmwareMatch-

qualcomm qcm6490Match-

Node

AND

qualcomm qcn5022_firmwareMatch-

qualcomm qcn5022Match-

Node

AND

qualcomm qcn5024_firmwareMatch-

qualcomm qcn5024Match-

Node

AND

qualcomm qcn5052_firmwareMatch-

qualcomm qcn5052Match-

Node

AND

qualcomm qcn5122_firmwareMatch-

qualcomm qcn5122Match-

Node

AND

qualcomm qcn5124_firmwareMatch-

qualcomm qcn5124Match-

Node

AND

qualcomm qcn5152_firmwareMatch-

qualcomm qcn5152Match-

Node

AND

qualcomm qcn5154_firmwareMatch-

qualcomm qcn5154Match-

Node

AND

qualcomm qcn5164_firmwareMatch-

qualcomm qcn5164Match-

Node

AND

qualcomm qcn5224_firmwareMatch-

qualcomm qcn5224Match-

Node

AND

qualcomm qcn6023_firmwareMatch-

qualcomm qcn6023Match-

Node

AND

qualcomm qcn6024_firmwareMatch-

qualcomm qcn6024Match-

Node

AND

qualcomm qcn6112_firmwareMatch-

qualcomm qcn6112Match-

Node

AND

qualcomm qcn6122_firmwareMatch-

qualcomm qcn6122Match-

Node

AND

qualcomm qcn6132_firmwareMatch-

qualcomm qcn6132Match-

Node

AND

qualcomm qcn6224_firmwareMatch-

qualcomm qcn6224Match-

Node

AND

qualcomm qcn6274_firmwareMatch-

qualcomm qcn6274Match-

Node

AND

qualcomm qcn6402_firmwareMatch-

qualcomm qcn6402Match-

Node

AND

qualcomm csr8811_firmwareMatch-

qualcomm csr8811Match-

Node

AND

qualcomm fastconnect_6700_firmwareMatch-

qualcomm fastconnect_6700Match-

Node

AND

qualcomm fastconnect_6900_firmwareMatch-

qualcomm fastconnect_6900Match-

Node

AND

qualcomm fastconnect_7800_firmwareMatch-

qualcomm fastconnect_7800Match-

Node

AND

qualcomm fwa_gen_3_ultra_firmwareMatch-

qualcomm fwa_gen_3_ultraMatch-

Node

AND

qualcomm fwa_gen_5_elite_firmwareMatch-

qualcomm fwa_gen_5_eliteMatch-

Node

AND

qualcomm immersive_home_214_platform_firmwareMatch-

qualcomm immersive_home_214_platformMatch-

Node

AND

qualcomm immersive_home_216_platform_firmwareMatch-

qualcomm immersive_home_216_platformMatch-

Node

AND

qualcomm immersive_home_316_platform_firmwareMatch-

qualcomm immersive_home_316_platformMatch-

Node

AND

qualcomm immersive_home_318_platform_firmwareMatch-

qualcomm immersive_home_318_platformMatch-

Node

AND

qualcomm immersive_home_3210_platform_firmwareMatch-

qualcomm immersive_home_3210_platformMatch-

Node

AND

qualcomm immersive_home_326_platform_firmwareMatch-

qualcomm immersive_home_326_platformMatch-

Node

AND

qualcomm ipq5010_firmwareMatch-

qualcomm ipq5010Match-

Node

AND

qualcomm ipq5028_firmwareMatch-

qualcomm ipq5028Match-

Node

AND

qualcomm ipq5300_firmwareMatch-

qualcomm ipq5300Match-

Node

AND

qualcomm ipq5302_firmwareMatch-

qualcomm ipq5302Match-

Node

AND

qualcomm ipq5312_firmwareMatch-

qualcomm ipq5312Match-

Node

AND

qualcomm ipq5332_firmwareMatch-

qualcomm ipq5332Match-

Node

AND

qualcomm ipq6000_firmwareMatch-

qualcomm ipq6000Match-

Node

AND

qualcomm ipq6010_firmwareMatch-

qualcomm ipq6010Match-

Node

AND

qualcomm ipq6018_firmwareMatch-

qualcomm ipq6018Match-

Node

AND

qualcomm ipq8076_firmwareMatch-

qualcomm ipq8076Match-

Node

AND

qualcomm ipq8078_firmwareMatch-

qualcomm ipq8078Match-

Node

AND

qualcomm ipq9008_firmwareMatch-

qualcomm ipq9008Match-

Node

AND

qualcomm ipq9048_firmwareMatch-

qualcomm ipq9048Match-

Node

AND

qualcomm ipq9554_firmwareMatch-

qualcomm ipq9554Match-

Node

AND

qualcomm ipq9570_firmwareMatch-

qualcomm ipq9570Match-

Node

AND

qualcomm ipq9574_firmwareMatch-

qualcomm ipq9574Match-

Node

AND

qualcomm kobuk_firmwareMatch-

qualcomm kobukMatch-

Node

AND

qualcomm marina_firmwareMatch-

qualcomm marinaMatch-

Node

AND

qualcomm networking_pro_1200_platform_firmwareMatch-

qualcomm networking_pro_1200_platformMatch-

Node

AND

qualcomm networking_pro_1210_platform_firmwareMatch-

qualcomm networking_pro_1210_platformMatch-

Node

AND

qualcomm networking_pro_1610_platform_firmwareMatch-

qualcomm networking_pro_1610_platformMatch-

Node

AND

qualcomm networking_pro_400_platform_firmwareMatch-

qualcomm networking_pro_400_platformMatch-

Node

AND

qualcomm networking_pro_600_platform_firmwareMatch-

qualcomm networking_pro_600_platformMatch-

Node

AND

qualcomm networking_pro_610_platform_firmwareMatch-

qualcomm networking_pro_610_platformMatch-

Node

AND

qualcomm networking_pro_800_platform_firmwareMatch-

qualcomm networking_pro_800_platformMatch-

Node

AND

qualcomm networking_pro_810_platform_firmwareMatch-

qualcomm networking_pro_810_platformMatch-

Node

AND

qualcomm orne_firmwareMatch-

qualcomm orneMatch-

Node

AND

qualcomm qca0000_firmwareMatch-

qualcomm qca0000Match-

Node

AND

qualcomm qcn6412_firmwareMatch-

qualcomm qcn6412Match-

Node

AND

qualcomm qcn6422_firmwareMatch-

qualcomm qcn6422Match-

Node

AND

qualcomm qcn6432_firmwareMatch-

qualcomm qcn6432Match-

Node

AND

qualcomm qcn9000_firmwareMatch-

qualcomm qcn9000Match-

Node

AND

qualcomm qcn9012_firmwareMatch-

qualcomm qcn9012Match-

Node

AND

qualcomm qcn9013_firmwareMatch-

qualcomm qcn9013Match-

Node

AND

qualcomm qcn9022_firmwareMatch-

qualcomm qcn9022Match-

Node

AND

qualcomm qcn9024_firmwareMatch-

qualcomm qcn9024Match-

Node

AND

qualcomm qcn9070_firmwareMatch-

qualcomm qcn9070Match-

Node

AND

qualcomm qcn9100_firmwareMatch-

qualcomm qcn9100Match-

Node

AND

qualcomm qcn9160_firmwareMatch-

qualcomm qcn9160Match-

Node

AND

qualcomm qcn9274_firmwareMatch-

qualcomm qcn9274Match-

Node

AND

qualcomm qfw7114_firmwareMatch-

qualcomm qfw7114Match-

Node

AND

qualcomm qfw7124_firmwareMatch-

qualcomm qfw7124Match-

Node

AND

qualcomm qfw7224_firmwareMatch-

qualcomm qfw7224Match-

Node

AND

qualcomm qmx82l_firmwareMatch-

qualcomm qmx82lMatch-

Node

AND

qualcomm qmx85l_firmwareMatch-

qualcomm qmx85lMatch-

Node

AND

qualcomm video_collaboration_vc3_platform_firmwareMatch-

qualcomm video_collaboration_vc3_platformMatch-

Node

AND

qualcomm qxm8083_firmwareMatch-

qualcomm qxm8083Match-

Node

AND

qualcomm sar2130p_firmwareMatch-

qualcomm sar2130pMatch-

Node

AND

qualcomm sdx61_firmwareMatch-

qualcomm sdx61Match-

Node

AND

qualcomm sdx65m_firmwareMatch-

qualcomm sdx65mMatch-

Node

AND

qualcomm sdx81_firmwareMatch-

qualcomm sdx81Match-

Node

AND

qualcomm snapdragon_460_mobile_platform_firmwareMatch-

qualcomm snapdragon_460_mobile_platformMatch-

Node

AND

qualcomm snapdragon_662_mobile_platform_firmwareMatch-

qualcomm snapdragon_662_mobile_platformMatch-

Node

AND

qualcomm snapdragon_auto_5g_modem-rf_firmwareMatch-

qualcomm snapdragon_auto_5g_modem-rfMatch-

Node

AND

qualcomm snapdragon_x62_5g_modem-rf_system_firmwareMatch-

qualcomm snapdragon_x62_5g_modem-rf_systemMatch-

Node

AND

qualcomm snapdragon_x65_5g_modem-rf_system_firmwareMatch-

qualcomm snapdragon_x65_5g_modem-rf_systemMatch-

Node

AND

qualcomm snapdragon_x72_5g_modem-rf_system_firmwareMatch-

qualcomm snapdragon_x72_5g_modem-rf_systemMatch-

Node

AND

qualcomm snapdragon_x75_5g_modem-rf_system_firmwareMatch-

qualcomm snapdragon_x75_5g_modem-rf_systemMatch-

Node

AND

qualcomm sw-only_firmwareMatch-

qualcomm sw-onlyMatch-

Node

AND

qualcomm wcd9340_firmwareMatch-

qualcomm wcd9340Match-

Node

AND

qualcomm wcd9370_firmwareMatch-

qualcomm wcd9370Match-

Node

AND

qualcomm wcd9375_firmwareMatch-

qualcomm wcd9375Match-

Node

AND

qualcomm wcd9380_firmwareMatch-

qualcomm wcd9380Match-

Node

AND

qualcomm wcd9385_firmwareMatch-

qualcomm wcd9385Match-

Node

AND

qualcomm wcn3950_firmwareMatch-

qualcomm wcn3950Match-

Node

AND

qualcomm wcn3988_firmwareMatch-

qualcomm wcn3988Match-

Node

AND

qualcomm wcn6755_firmwareMatch-

qualcomm wcn6755Match-

Node

AND

qualcomm wcn7861_firmwareMatch-

qualcomm wcn7861Match-

Node

AND

qualcomm wcn7881_firmwareMatch-

qualcomm wcn7881Match-

Node

AND

qualcomm wsa8830_firmwareMatch-

qualcomm wsa8830Match-

Node

AND

qualcomm wsa8832_firmwareMatch-

qualcomm wsa8832Match-

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Snapdragon Auto",
      "Snapdragon Compute",
      "Snapdragon Consumer IOT",
      "Snapdragon Industrial IOT",
      "Snapdragon Mobile",
      "Snapdragon WBC",
      "Snapdragon Wired Infrastructure and Networking"
    ],
    "product": "Snapdragon",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "5G Fixed Wireless Access Platform"
      },
      {
        "status": "affected",
        "version": "AR8035"
      },
      {
        "status": "affected",
        "version": "CQ7790"
      },
      {
        "status": "affected",
        "version": "CQ8725S"
      },
      {
        "status": "affected",
        "version": "CSR8811"
      },
      {
        "status": "affected",
        "version": "FastConnect 6700"
      },
      {
        "status": "affected",
        "version": "FastConnect 6900"
      },
      {
        "status": "affected",
        "version": "FastConnect 7800"
      },
      {
        "status": "affected",
        "version": "FWA Gen 3 Ultra Platform"
      },
      {
        "status": "affected",
        "version": "FWA Gen 5 Elite Platform"
      },
      {
        "status": "affected",
        "version": "Immersive Home 214 Platform"
      },
      {
        "status": "affected",
        "version": "Immersive Home 216 Platform"
      },
      {
        "status": "affected",
        "version": "Immersive Home 316 Platform"
      },
      {
        "status": "affected",
        "version": "Immersive Home 318 Platform"
      },
      {
        "status": "affected",
        "version": "Immersive Home 3210 Platform"
      },
      {
        "status": "affected",
        "version": "Immersive Home 326 Platform"
      },
      {
        "status": "affected",
        "version": "IPQ5010"
      },
      {
        "status": "affected",
        "version": "IPQ5028"
      },
      {
        "status": "affected",
        "version": "IPQ5300"
      },
      {
        "status": "affected",
        "version": "IPQ5302"
      },
      {
        "status": "affected",
        "version": "IPQ5312"
      },
      {
        "status": "affected",
        "version": "IPQ5332"
      },
      {
        "status": "affected",
        "version": "IPQ6000"
      },
      {
        "status": "affected",
        "version": "IPQ6010"
      },
      {
        "status": "affected",
        "version": "IPQ6018"
      },
      {
        "status": "affected",
        "version": "IPQ8076"
      },
      {
        "status": "affected",
        "version": "IPQ8078"
      },
      {
        "status": "affected",
        "version": "IPQ9008"
      },
      {
        "status": "affected",
        "version": "IPQ9048"
      },
      {
        "status": "affected",
        "version": "IPQ9554"
      },
      {
        "status": "affected",
        "version": "IPQ9570"
      },
      {
        "status": "affected",
        "version": "IPQ9574"
      },
      {
        "status": "affected",
        "version": "Kobuk"
      },
      {
        "status": "affected",
        "version": "Marina"
      },
      {
        "status": "affected",
        "version": "Networking Pro 1200 Platform"
      },
      {
        "status": "affected",
        "version": "Networking Pro 1210 Platform"
      },
      {
        "status": "affected",
        "version": "Networking Pro 1610 Platform"
      },
      {
        "status": "affected",
        "version": "Networking Pro 400 Platform"
      },
      {
        "status": "affected",
        "version": "Networking Pro 600 Platform"
      },
      {
        "status": "affected",
        "version": "Networking Pro 610 Platform"
      },
      {
        "status": "affected",
        "version": "Networking Pro 800 Platform"
      },
      {
        "status": "affected",
        "version": "Networking Pro 810 Platform"
      },
      {
        "status": "affected",
        "version": "Orne"
      },
      {
        "status": "affected",
        "version": "QCA0000"
      },
      {
        "status": "affected",
        "version": "QCA4024"
      },
      {
        "status": "affected",
        "version": "QCA6174A"
      },
      {
        "status": "affected",
        "version": "QCA8075"
      },
      {
        "status": "affected",
        "version": "QCA8080"
      },
      {
        "status": "affected",
        "version": "QCA8081"
      },
      {
        "status": "affected",
        "version": "QCA8082"
      },
      {
        "status": "affected",
        "version": "QCA8084"
      },
      {
        "status": "affected",
        "version": "QCA8085"
      },
      {
        "status": "affected",
        "version": "QCA8101"
      },
      {
        "status": "affected",
        "version": "QCA8102"
      },
      {
        "status": "affected",
        "version": "QCA8111"
      },
      {
        "status": "affected",
        "version": "QCA8112"
      },
      {
        "status": "affected",
        "version": "QCA8337"
      },
      {
        "status": "affected",
        "version": "QCA8384"
      },
      {
        "status": "affected",
        "version": "QCA8385"
      },
      {
        "status": "affected",
        "version": "QCA8386"
      },
      {
        "status": "affected",
        "version": "QCA9888"
      },
      {
        "status": "affected",
        "version": "QCA9889"
      },
      {
        "status": "affected",
        "version": "QCC710"
      },
      {
        "status": "affected",
        "version": "QCF8000"
      },
      {
        "status": "affected",
        "version": "QCF8001"
      },
      {
        "status": "affected",
        "version": "QCM5430"
      },
      {
        "status": "affected",
        "version": "QCM6490"
      },
      {
        "status": "affected",
        "version": "QCN5022"
      },
      {
        "status": "affected",
        "version": "QCN5024"
      },
      {
        "status": "affected",
        "version": "QCN5052"
      },
      {
        "status": "affected",
        "version": "QCN5122"
      },
      {
        "status": "affected",
        "version": "QCN5124"
      },
      {
        "status": "affected",
        "version": "QCN5152"
      },
      {
        "status": "affected",
        "version": "QCN5154"
      },
      {
        "status": "affected",
        "version": "QCN5164"
      },
      {
        "status": "affected",
        "version": "QCN5224"
      },
      {
        "status": "affected",
        "version": "QCN6023"
      },
      {
        "status": "affected",
        "version": "QCN6024"
      },
      {
        "status": "affected",
        "version": "QCN6112"
      },
      {
        "status": "affected",
        "version": "QCN6122"
      },
      {
        "status": "affected",
        "version": "QCN6132"
      },
      {
        "status": "affected",
        "version": "QCN6224"
      },
      {
        "status": "affected",
        "version": "QCN6274"
      },
      {
        "status": "affected",
        "version": "QCN6402"
      },
      {
        "status": "affected",
        "version": "QCN6412"
      },
      {
        "status": "affected",
        "version": "QCN6422"
      },
      {
        "status": "affected",
        "version": "QCN6432"
      },
      {
        "status": "affected",
        "version": "QCN9000"
      },
      {
        "status": "affected",
        "version": "QCN9012"
      },
      {
        "status": "affected",
        "version": "QCN9013"
      },
      {
        "status": "affected",
        "version": "QCN9022"
      },
      {
        "status": "affected",
        "version": "QCN9024"
      },
      {
        "status": "affected",
        "version": "QCN9070"
      },
      {
        "status": "affected",
        "version": "QCN9100"
      },
      {
        "status": "affected",
        "version": "QCN9160"
      },
      {
        "status": "affected",
        "version": "QCN9274"
      },
      {
        "status": "affected",
        "version": "QFW7114"
      },
      {
        "status": "affected",
        "version": "QFW7124"
      },
      {
        "status": "affected",
        "version": "QFW7224"
      },
      {
        "status": "affected",
        "version": "QMX82L"
      },
      {
        "status": "affected",
        "version": "QMX85L"
      },
      {
        "status": "affected",
        "version": "Qualcomm Video Collaboration VC3 Platform"
      },
      {
        "status": "affected",
        "version": "QXM8083"
      },
      {
        "status": "affected",
        "version": "SAR2130P"
      },
      {
        "status": "affected",
        "version": "SDX61"
      },
      {
        "status": "affected",
        "version": "SDX65M"
      },
      {
        "status": "affected",
        "version": "SDX81"
      },
      {
        "status": "affected",
        "version": "Snapdragon 460 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 662 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon Auto 5G Modem-RF"
      },
      {
        "status": "affected",
        "version": "Snapdragon X62 5G Modem-RF System"
      },
      {
        "status": "affected",
        "version": "Snapdragon X65 5G Modem-RF System"
      },
      {
        "status": "affected",
        "version": "Snapdragon X72 5G Modem-RF System"
      },
      {
        "status": "affected",
        "version": "Snapdragon X75 5G Modem-RF System"
      },
      {
        "status": "affected",
        "version": "SW-only"
      },
      {
        "status": "affected",
        "version": "WCD9340"
      },
      {
        "status": "affected",
        "version": "WCD9370"
      },
      {
        "status": "affected",
        "version": "WCD9375"
      },
      {
        "status": "affected",
        "version": "WCD9380"
      },
      {
        "status": "affected",
        "version": "WCD9385"
      },
      {
        "status": "affected",
        "version": "WCN3950"
      },
      {
        "status": "affected",
        "version": "WCN3988"
      },
      {
        "status": "affected",
        "version": "WCN6755"
      },
      {
        "status": "affected",
        "version": "WCN7861"
      },
      {
        "status": "affected",
        "version": "WCN7881"
      },
      {
        "status": "affected",
        "version": "WSA8830"
      },
      {
        "status": "affected",
        "version": "WSA8832"
      },
      {
        "status": "affected",
        "version": "WSA8835"
      }
    ]
  }
]

Source	Link
docs	www.docs.qualcomm.com/product/publicresources/securitybulletin/july-2026-bulletin.html

07 Jul 2026 16:37Current

6Medium risk

Vulners AI Score6

CVSS 3.18.8

EPSS0.00072

SSVC

CWE-121