← All CVEs

CVE-2026-25289

critical · 9.6

Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.

9.6
CVSS
0.1%
EPSS (exploit prob.)
2nd
EPSS percentile
2026-08-04
Published

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-121

Affected products

VendorProductAffected versions
qualcommsm7550p_firmwareall versions
qualcommsm7550pall versions
qualcommsm7635p_firmwareall versions
qualcommsm7635pall versions
qualcommsm7675_firmwareall versions
qualcommsm7675all versions
qualcommsm7675p_firmwareall versions
qualcommsm7675pall versions
qualcommsm8425_firmwareall versions
qualcommsm8425all versions
qualcommsm8550p_firmwareall versions
qualcommsm8550pall versions
qualcommsm8635_firmwareall versions
qualcommsm8635all versions
qualcommsm8635p_firmwareall versions
qualcommsm8635pall versions
qualcommsm8650q_firmwareall versions
qualcommsm8650qall versions
qualcommsm8735p_firmwareall versions
qualcommsm8735pall versions
qualcommsm8750p_firmwareall versions
qualcommsm8750pall versions
qualcommsm8845p_firmwareall versions
qualcommsm8845pall versions
qualcommsnapdragon_6_gen_1_mobile_platform_firmwareall versions
qualcommsnapdragon_6_gen_1_mobile_platformall versions
qualcommsnapdragon_6_gen_3_mobile_platform_firmwareall versions
qualcommsnapdragon_6_gen_3_mobile_platformall versions
qualcommsnapdragon_6_gen_4_mobile_platform_firmwareall versions
qualcommsnapdragon_6_gen_4_mobile_platformall versions
qualcommsnapdragon_7_gen_4_mobile_platform_firmwareall versions
qualcommsnapdragon_7_gen_4_mobile_platformall versions
qualcommsnapdragon_7s_gen_3_mobile_platform_firmwareall versions
qualcommsnapdragon_7s_gen_3_mobile_platformall versions
qualcommsnapdragon_8_elite_firmwareall versions
qualcommsnapdragon_8_eliteall versions
qualcommsnapdragon_8_elite_gen_5_firmwareall versions
qualcommsnapdragon_8_elite_gen_5all versions
qualcommsnapdragon_8_gen_2_mobile_platform_firmwareall versions
qualcommsnapdragon_8_gen_2_mobile_platformall versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-25289