What’s Vulnerable › Vulnerabilities
CVE-2026-25275: Buffer Over-read in WLAN Firmware
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-09-17 · updated 2026-09-22
- Weakness: CWE-126
Description
Transient DOS when processing authentication frames with invalid FILS information element header lengths.
Affected products
- Qualcomm 5G Fixed Wireless Access Platform Firmware: all versions
- Qualcomm Aqt1000 Firmware: all versions
- Qualcomm Ar8031 Firmware: all versions
- Qualcomm Ar8035 Firmware: all versions
- Qualcomm C110100 Firmware: all versions
- Qualcomm Cologne Firmware: all versions
- Qualcomm Congo Firmware: all versions
- Qualcomm Cq2390M Firmware: all versions
- Qualcomm Cq2390S Firmware: all versions
- Qualcomm Cq7790 Firmware: all versions
- Qualcomm Cq7790M Firmware: all versions
- Qualcomm Cq8725S Firmware: all versions
- Qualcomm Cq8750M Firmware: all versions
- Qualcomm Cq8845S Firmware: all versions
- Qualcomm Csr8811 Firmware: all versions
- Qualcomm Csra6620 Firmware: all versions
- Qualcomm Csra6640 Firmware: all versions
- Qualcomm Csrb31024 Firmware: all versions
- Qualcomm Fastconnect 6200 Firmware: all versions
- Qualcomm Fastconnect 6700 Firmware: all versions
- Qualcomm Fastconnect 6800 Firmware: all versions
- Qualcomm Fastconnect 6900 Firmware: all versions
- Qualcomm Fastconnect 7800 Firmware: all versions
- Qualcomm Fastconnect 8800 Mobile Connectivity System Firmware: all versions
- Qualcomm Flight Rb5 5G Platform Firmware: all versions
- Qualcomm Fwa Gen 3 Ultra Firmware: all versions
- Qualcomm Fwa Gen 5 Elite Firmware: all versions
- Qualcomm G1 Gen 1 Firmware: all versions
- Qualcomm G2 Gen 1 Firmware: all versions
- Qualcomm G3X Gen 2 Firmware: all versions
References
Get alerted when CVE-2026-25275 or the next vulnerability affects your stack