CVE-2026-25294

🗓️ 17 Sep 2026 04:11:54Reported by qualcommType

Buffer over-read in WLAN Firmware causing transient DoS while parsing frames during channel usage.

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2026-25294 Buffer Over-read in WLAN Firmware	17 Sep 202604:11	–	cvelist
EUVD	EUVD-2026-81333	17 Sep 202604:11	–	euvd
NVD	CVE-2026-25294	17 Sep 202605:17	–	nvd
Positive Technologies	PT-2026-94152	17 Sep 202600:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2026-25294: Buffer Over-read	17 Sep 202600:00	–	rapid7
Vulnrichment	CVE-2026-25294 Buffer Over-read in WLAN Firmware	17 Sep 202604:11	–	vulnrichment

NVD

Vulners

Node

AND

qualcomm cologne_firmwareMatch-

qualcomm cologneMatch-

Node

AND

qualcomm congo_firmwareMatch-

qualcomm congoMatch-

Node

AND

qualcomm cq7790_firmwareMatch-

qualcomm cq7790Match-

Node

AND

qualcomm cq7790m_firmwareMatch-

qualcomm cq7790mMatch-

Node

AND

qualcomm cq8845s_firmwareMatch-

qualcomm cq8845sMatch-

Node

AND

qualcomm fastconnect_6200_firmwareMatch-

qualcomm fastconnect_6200Match-

Node

AND

qualcomm fastconnect_6700_firmwareMatch-

qualcomm fastconnect_6700Match-

Node

AND

qualcomm fastconnect_6900_firmwareMatch-

qualcomm fastconnect_6900Match-

Node

AND

qualcomm fastconnect_7800_firmwareMatch-

qualcomm fastconnect_7800Match-

Node

AND

qualcomm mbm715_firmwareMatch-

qualcomm mbm715Match-

Node

AND

qualcomm orne_firmwareMatch-

qualcomm orneMatch-

Node

AND

qualcomm palawan25_firmwareMatch-

qualcomm palawan25Match-

Node

AND

qualcomm pandeiro_firmwareMatch-

qualcomm pandeiroMatch-

Node

AND

qualcomm q-7790_firmwareMatch-

qualcomm q-7790Match-

Node

AND

qualcomm qln1083bd_firmwareMatch-

qualcomm qln1083bdMatch-

Node

AND

qualcomm qln1086bd_firmwareMatch-

qualcomm qln1086bdMatch-

Node

AND

qualcomm qmp1000_firmwareMatch-

qualcomm qmp1000Match-

Node

AND

qualcomm qmp2001_firmwareMatch-

qualcomm qmp2001Match-

Node

AND

qualcomm qpa1083bd_firmwareMatch-

qualcomm qpa1083bdMatch-

Node

AND

qualcomm qpa1086bd_firmwareMatch-

qualcomm qpa1086bdMatch-

Node

AND

qualcomm fastconnect_8800_mobile_connectivity_system_firmwareMatch-

qualcomm fastconnect_8800_mobile_connectivity_systemMatch-

Node

AND

qualcomm qxm1093_firmwareMatch-

qualcomm qxm1093Match-

Node

AND

qualcomm qxm1094_firmwareMatch-

qualcomm qxm1094Match-

Node

AND

qualcomm qxm1095_firmwareMatch-

qualcomm qxm1095Match-

Node

AND

qualcomm qxm1096_firmwareMatch-

qualcomm qxm1096Match-

Node

AND

qualcomm sc8380xp_firmwareMatch-

qualcomm sc8380xpMatch-

Node

AND

qualcomm sm4875_firmwareMatch-

qualcomm sm4875Match-

Node

AND

qualcomm sm6850_firmwareMatch-

qualcomm sm6850Match-

Node

AND

qualcomm sm7675_firmwareMatch-

qualcomm sm7675Match-

Node

AND

qualcomm sm7675p_firmwareMatch-

qualcomm sm7675pMatch-

Node

AND

qualcomm sm7750p_firmwareMatch-

qualcomm sm7750pMatch-

Node

AND

qualcomm sm8635_firmwareMatch-

qualcomm sm8635Match-

Node

AND

qualcomm sm8635p_firmwareMatch-

qualcomm sm8635pMatch-

Node

AND

qualcomm sm8650q_firmwareMatch-

qualcomm sm8650qMatch-

Node

AND

qualcomm sm8735p_firmwareMatch-

qualcomm sm8735pMatch-

Node

AND

qualcomm sm8750p_firmwareMatch-

qualcomm sm8750pMatch-

Node

AND

qualcomm sm8845p_firmwareMatch-

qualcomm sm8845pMatch-

Node

AND

qualcomm sm8950_firmwareMatch-

qualcomm sm8950Match-

Node

AND

qualcomm sm8950p_firmwareMatch-

qualcomm sm8950pMatch-

Node

AND

qualcomm sm8975_firmwareMatch-

qualcomm sm8975Match-

Node

AND

qualcomm sm8975p_firmwareMatch-

qualcomm sm8975pMatch-

Node

AND

qualcomm snapdragon_7_gen_4_mobile_platform_firmwareMatch-

qualcomm snapdragon_7_gen_4_mobile_platformMatch-

Node

AND

qualcomm snapdragon_8_elite_firmwareMatch-

qualcomm snapdragon_8_eliteMatch-

Node

AND

qualcomm snapdragon_8_elite_gen_5_firmwareMatch-

qualcomm snapdragon_8_elite_gen_5Match-

Node

AND

qualcomm snapdragon_8_gen_3_mobile_platform_firmwareMatch-

qualcomm snapdragon_8_gen_3_mobile_platformMatch-

Node

AND

qualcomm snapdragon_8_gen_5_firmwareMatch-

qualcomm snapdragon_8_gen_5Match-

Node

AND

qualcomm sw-only_firmwareMatch-

qualcomm sw-onlyMatch-

Node

AND

qualcomm wcd9370_firmwareMatch-

qualcomm wcd9370Match-

Node

AND

qualcomm wcd9375_firmwareMatch-

qualcomm wcd9375Match-

Node

AND

qualcomm wcd9378_firmwareMatch-

qualcomm wcd9378Match-

Node

AND

qualcomm wcd9380_firmwareMatch-

qualcomm wcd9380Match-

Node

AND

qualcomm wcd9385_firmwareMatch-

qualcomm wcd9385Match-

Node

AND

qualcomm wcd9390_firmwareMatch-

qualcomm wcd9390Match-

Node

AND

qualcomm wcd9395_firmwareMatch-

qualcomm wcd9395Match-

Node

AND

qualcomm wcn3988_firmwareMatch-

qualcomm wcn3988Match-

Node

AND

qualcomm wcn6450_firmwareMatch-

qualcomm wcn6450Match-

Node

AND

qualcomm wcn6755_firmwareMatch-

qualcomm wcn6755Match-

Node

AND

qualcomm wcn7760_firmwareMatch-

qualcomm wcn7760Match-

Node

AND

qualcomm wcn7860_firmwareMatch-

qualcomm wcn7860Match-

Node

AND

qualcomm wcn7861_firmwareMatch-

qualcomm wcn7861Match-

Node

AND

qualcomm wcn7880_firmwareMatch-

qualcomm wcn7880Match-

Node

AND

qualcomm wcn7881_firmwareMatch-

qualcomm wcn7881Match-

Node

AND

qualcomm wcn8841_firmwareMatch-

qualcomm wcn8841Match-

Node

AND

qualcomm wsa8830_firmwareMatch-

qualcomm wsa8830Match-

Node

AND

qualcomm wsa8832_firmwareMatch-

qualcomm wsa8832Match-

Node

AND

qualcomm wsa8835_firmwareMatch-

qualcomm wsa8835Match-

Node

AND

qualcomm wsa8840_firmwareMatch-

qualcomm wsa8840Match-

Node

AND

qualcomm wsa8845_firmwareMatch-

qualcomm wsa8845Match-

Node

AND

qualcomm wsa8845h_firmwareMatch-

qualcomm wsa8845hMatch-

Node

AND

qualcomm wsa8850_firmwareMatch-

qualcomm wsa8850Match-

Node

AND

qualcomm wsa8850w_firmwareMatch-

qualcomm wsa8850wMatch-

Node

AND

qualcomm wsa8855c_firmwareMatch-

qualcomm wsa8855cMatch-

Node

AND

qualcomm x1e80100_firmwareMatch-

qualcomm x1e80100Match-

Node

AND

qualcomm xrv7209_firmwareMatch-

qualcomm xrv7209Match-

Node

AND

qualcomm xrv9209_firmwareMatch-

qualcomm xrv9209Match-

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Snapdragon CCW",
      "Snapdragon Compute",
      "Snapdragon Industrial IOT",
      "Snapdragon MC",
      "Snapdragon Mobile",
      "Snapdragon WBC"
    ],
    "product": "Snapdragon",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "Cologne"
      },
      {
        "status": "affected",
        "version": "Congo"
      },
      {
        "status": "affected",
        "version": "CQ7790"
      },
      {
        "status": "affected",
        "version": "CQ7790M"
      },
      {
        "status": "affected",
        "version": "CQ8845S"
      },
      {
        "status": "affected",
        "version": "FastConnect 6200"
      },
      {
        "status": "affected",
        "version": "FastConnect 6700"
      },
      {
        "status": "affected",
        "version": "FastConnect 6900"
      },
      {
        "status": "affected",
        "version": "FastConnect 7800"
      },
      {
        "status": "affected",
        "version": "MBM715"
      },
      {
        "status": "affected",
        "version": "Orne"
      },
      {
        "status": "affected",
        "version": "Palawan25"
      },
      {
        "status": "affected",
        "version": "Pandeiro"
      },
      {
        "status": "affected",
        "version": "Q-7790"
      },
      {
        "status": "affected",
        "version": "QLN1083BD"
      },
      {
        "status": "affected",
        "version": "QLN1086BD"
      },
      {
        "status": "affected",
        "version": "QMP1000"
      },
      {
        "status": "affected",
        "version": "QMP2001"
      },
      {
        "status": "affected",
        "version": "QPA1083BD"
      },
      {
        "status": "affected",
        "version": "QPA1086BD"
      },
      {
        "status": "affected",
        "version": "Qualcomm FastConnect 8800 Mobile Connectivity System"
      },
      {
        "status": "affected",
        "version": "QXM1093"
      },
      {
        "status": "affected",
        "version": "QXM1094"
      },
      {
        "status": "affected",
        "version": "QXM1095"
      },
      {
        "status": "affected",
        "version": "QXM1096"
      },
      {
        "status": "affected",
        "version": "SC8380XP"
      },
      {
        "status": "affected",
        "version": "SM4875"
      },
      {
        "status": "affected",
        "version": "SM6850"
      },
      {
        "status": "affected",
        "version": "SM7675"
      },
      {
        "status": "affected",
        "version": "SM7675P"
      },
      {
        "status": "affected",
        "version": "SM7750P"
      },
      {
        "status": "affected",
        "version": "SM8635"
      },
      {
        "status": "affected",
        "version": "SM8635P"
      },
      {
        "status": "affected",
        "version": "SM8650Q"
      },
      {
        "status": "affected",
        "version": "SM8735P"
      },
      {
        "status": "affected",
        "version": "SM8750P"
      },
      {
        "status": "affected",
        "version": "SM8845P"
      },
      {
        "status": "affected",
        "version": "SM8950"
      },
      {
        "status": "affected",
        "version": "SM8950P"
      },
      {
        "status": "affected",
        "version": "SM8975"
      },
      {
        "status": "affected",
        "version": "SM8975P"
      },
      {
        "status": "affected",
        "version": "Snapdragon 7 Gen 4 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 8 Elite"
      },
      {
        "status": "affected",
        "version": "Snapdragon 8 Elite Gen 5"
      },
      {
        "status": "affected",
        "version": "Snapdragon 8 Gen 3 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 8 Gen 5"
      },
      {
        "status": "affected",
        "version": "SW-only"
      },
      {
        "status": "affected",
        "version": "WCD9370"
      },
      {
        "status": "affected",
        "version": "WCD9375"
      },
      {
        "status": "affected",
        "version": "WCD9378"
      },
      {
        "status": "affected",
        "version": "WCD9380"
      },
      {
        "status": "affected",
        "version": "WCD9385"
      },
      {
        "status": "affected",
        "version": "WCD9390"
      },
      {
        "status": "affected",
        "version": "WCD9395"
      },
      {
        "status": "affected",
        "version": "WCN3988"
      },
      {
        "status": "affected",
        "version": "WCN6450"
      },
      {
        "status": "affected",
        "version": "WCN6755"
      },
      {
        "status": "affected",
        "version": "WCN7760"
      },
      {
        "status": "affected",
        "version": "WCN7860"
      },
      {
        "status": "affected",
        "version": "WCN7861"
      },
      {
        "status": "affected",
        "version": "WCN7880"
      },
      {
        "status": "affected",
        "version": "WCN7881"
      },
      {
        "status": "affected",
        "version": "WCN8841"
      },
      {
        "status": "affected",
        "version": "WSA8830"
      },
      {
        "status": "affected",
        "version": "WSA8832"
      },
      {
        "status": "affected",
        "version": "WSA8835"
      },
      {
        "status": "affected",
        "version": "WSA8840"
      },
      {
        "status": "affected",
        "version": "WSA8845"
      },
      {
        "status": "affected",
        "version": "WSA8845H"
      },
      {
        "status": "affected",
        "version": "WSA8850"
      },
      {
        "status": "affected",
        "version": "WSA8850W"
      },
      {
        "status": "affected",
        "version": "WSA8855C"
      },
      {
        "status": "affected",
        "version": "X1E80100"
      },
      {
        "status": "affected",
        "version": "XRV7209"
      },
      {
        "status": "affected",
        "version": "XRV9209"
      }
    ]
  }
]

Source	Link
docs	www.docs.qualcomm.com/product/publicresources/securitybulletin/september-2026-bulletin.html

22 Sep 2026 19:01Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17.4

EPSS0.001

SSVC

CWE-126