Qualcomm Snapdragon Security Bulletin: Stack Overflow, UAF, and Crypto Flaws (CVE-2026-25268 etc.)

Vulnerability Overview Proprietary Software Issues 1. CVE-2026-25268 - Title: Stack buffer overflow in WLAN Host - Description: Memory corruption occurs when processing invalid HT40 channel layouts, leading to dynamic channel switching operations. - Technical Area: WLAN Host - Vulnerability Type: CWE-121 Stack Buffer Overflow - Attack Vector: Remote - Security Rating: Critical - CVSS Score: 8.8 - Disclosure Date: Internal 2. CVE-2026-21379 - Title: Out-of-bounds read in Windows Compute - Description: Memory corruption occurs when memory is allocated beyond the maximum allowed value. - Technical Area: Windows Compute - Vulnerability Type: CWE-126 Out-of-bounds Read - Attack Vector: Local - Security Rating: High - CVSS Score: 7.8 - Disclosure Date: Internal 3. CVE-2026-21383 - Title: Reuse of Nonces and Key Pairs in HLOS - Description: When performing AES-GCM key wrapping using a static Initialization Vector (IV), uniqueness must be ensured for each invocation. - Technical Area: HLOS - Vulnerability Type: CWE-323 Reuse of Nonces and Key Pairs - Attack Vector: Local - Security Rating: High - CVSS Score: 7.1 - Disclosure Date: Internal 4. CVE-2026-25271 - Title: Time-of-check to time-of-use (TOCTOU) race condition in DSP services - Description: Memory corruption occurs due to improper handling of modified values between the check and use phases when processing asynchronous input parameters. - Technical Area: DSP Services - Vulnerability Type: CWE-367 Time-of-check to time-of-use (TOCTOU) Race Condition - Attack Vector: Local - Security Rating: High - CVSS Score: 7.8 - Disclosure Date: 2025/11/17 Open Source Software Issues 1. CVE-2025-59615 - Title: Use-after-free in Computer Vision - Description: Memory corruption occurs due to lack of synchronization when invoking device input/output control operations. - Technical Area: Computer Vision - Vulnerability Type: CWE-416 Use-after-free - Attack Vector: Local - Security Rating: Medium - CVSS Score: 6.6 - Disclosure Date: 2025/07/24 2. CVE-2025-59616 - Title: Use-after-free in Computer Vision - Description: Memory corruption occurs due to access to freed memory when handling multiple IOCTL calls. - Technical Area: Computer Vision - Vulnerability Type: CWE-416 Use-after-free - Attack Vector: Local - Security Rating: Medium - CVSS Score: 6.6 - Disclosure Date: 2025/07/20 Impact Scope Proprietary Software Issues: - CVE-2026-25268: Affects multiple platforms, including 5G Fixed Wireless Access platforms, the FastConnect series, the Immersive Home series, etc. - CVE-2026-21379: Affects multiple platforms, including the FastConnect series, Snapdragon series, etc. - CVE-2026-21383: Affects multiple platforms, including the FastConnect series, LeMans series, Qualcomm series, etc. - CVE-2026-25271: Affects multiple platforms, including the FastConnect series, Snapdragon series, etc. Open Source Software Issues: - CVE-2025-59615: Affects multiple platforms, including the FastConnect series, Qualcomm series, etc. - CVE-2025-59616: Affects multiple platforms, including the FastConnect series, Qualcomm series, etc. Remediation Proprietary Software Issues: - Patches are being actively shared with OEMs; it is recommended to deploy these patches as soon as possible. - Contact device manufacturers to obtain patch status information for released devices. Open Source Software Issues: - Patches are being actively shared with OEMs; it is recommended to deploy these patches as soon as possible. - Contact device manufacturers to obtain patch status information for released devices. POC Code or Exploit Code No POC code or exploit code is included on this page.

Goal Reached Thanks to every supporter — we hit 100%!

Qualcomm Snapdragon Security Bulletin: Stack Overflow, UAF, and Crypto Flaws (CVE-2026-25268 etc.)