CVE-2026-25267
HIGHDescription
Memory corruption when non-secure loader rewrites page tables before secure memory initialization.
Is your site exposed to CVE-2026-25267?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
EPSS — Exploit Prediction
EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| qualcomm | qca6698au_firmware |
| qualcomm | qca6698au |
| qualcomm | qca6797aq_firmware |
| qualcomm | qca6797aq |
| qualcomm | qcc710_firmware |
| qualcomm | qcc710 |
| qualcomm | qcm2290_firmware |
| qualcomm | qcm2290 |
| qualcomm | qcm4290_firmware |
| qualcomm | qcm4290 |
| qualcomm | qcm4325_firmware |
| qualcomm | qcm4325 |
| qualcomm | qcm4490_firmware |
| qualcomm | qcm4490 |
| qualcomm | qcm5430_firmware |
| qualcomm | qcm5430 |
| qualcomm | qcm6125_firmware |
| qualcomm | qcm6125 |
| qualcomm | qcm6490_firmware |
| qualcomm | qcm6490 |
| qualcomm | qcn9011_firmware |
| qualcomm | qcn9011 |
| qualcomm | qcn9012_firmware |
| qualcomm | qcn9012 |
| qualcomm | qcs2290_firmware |
| qualcomm | qcs2290 |
| qualcomm | qcs4290_firmware |
| qualcomm | qcs4290 |
| qualcomm | qcs4490_firmware |
| qualcomm | qcs4490 |
| qualcomm | qcs8550_firmware |
| qualcomm | qcs8550 |
| qualcomm | qts110_firmware |
| qualcomm | qts110 |
| qualcomm | video_collaboration_vc1_platform_firmware |
| qualcomm | video_collaboration_vc1_platform |
| qualcomm | video_collaboration_vc3_platform_firmware |
| qualcomm | video_collaboration_vc3_platform |
| qualcomm | video_collaboration_vc5_platform_firmware |
| qualcomm | video_collaboration_vc5_platform |
| qualcomm | robotics_rb2_platform_firmware |
| qualcomm | robotics_rb2_platform |
| qualcomm | robotics_rb5_platform_firmware |
| qualcomm | robotics_rb5_platform |
| qualcomm | sa2150p_firmware |
| qualcomm | sa2150p |
| qualcomm | sa4150p_firmware |
| qualcomm | sa4150p |
| qualcomm | sa4155p_firmware |
| qualcomm | sa4155p |
| qualcomm | sa6145p_firmware |
| qualcomm | sa6145p |
| qualcomm | sa6150p_firmware |
| qualcomm | sa6150p |
| qualcomm | sa6155_firmware |
| qualcomm | sa6155 |
| qualcomm | sa6155p_firmware |
| qualcomm | sa6155p |
| qualcomm | sa8145p_firmware |
| qualcomm | sa8145p |
| qualcomm | sa8150p_firmware |
| qualcomm | sa8150p |
| qualcomm | sa8155_firmware |
| qualcomm | sa8155 |
| qualcomm | sa8155p_firmware |
| qualcomm | sa8155p |
| qualcomm | sa8195p_firmware |
| qualcomm | sa8195p |
| qualcomm | sc8380xp_firmware |
| qualcomm | sc8380xp |
| qualcomm | snapdragon_8_gen1_5g_firmware |
| qualcomm | snapdragon_8_gen1_5g |
| qualcomm | snapdragon_662_mobile_platform_firmware |
| qualcomm | snapdragon_662_mobile_platform |
| qualcomm | snapdragon_865_5g_mobile_platform_firmware |
| qualcomm | snapdragon_865_5g_mobile_platform |
| qualcomm | sm6225p_firmware |
| qualcomm | sm6225p |
| qualcomm | sm6250_firmware |
| qualcomm | sm6250 |
| qualcomm | snapdragon_g1_gen_2_gaming_platform_firmware |
| qualcomm | snapdragon_g1_gen_2_gaming_platform |
| qualcomm | 5g_fixed_wireless_access_platform_firmware |
| qualcomm | 5g_fixed_wireless_access_platform |
| qualcomm | 9205_lte_modem_firmware |
| qualcomm | 9205_lte_modem |
| qualcomm | 9205s_modem_firmware |
| qualcomm | 9205s_modem |
| qualcomm | aqt1000_firmware |
| qualcomm | aqt1000 |
| qualcomm | ar8031_firmware |
| qualcomm | ar8031 |
| qualcomm | c-v2x_9150_firmware |
| qualcomm | c-v2x_9150 |
| qualcomm | csra6620_firmware |
| qualcomm | csra6620 |
| qualcomm | csra6640_firmware |
| qualcomm | csra6640 |
| qualcomm | csrb31024_firmware |
| qualcomm | csrb31024 |
| qualcomm | fastconnect_6200_firmware |
| qualcomm | fastconnect_6200 |
| qualcomm | fastconnect_6700_firmware |
| qualcomm | fastconnect_6700 |
| qualcomm | fastconnect_6800_firmware |
| qualcomm | fastconnect_6800 |
| qualcomm | fastconnect_6900_firmware |
| qualcomm | fastconnect_6900 |
| qualcomm | fastconnect_7800_firmware |
| qualcomm | fastconnect_7800 |
| qualcomm | flight_rb5_5g_platform_firmware |
| qualcomm | flight_rb5_5g_platform |
| qualcomm | fsm100_platform_firmware |
| qualcomm | fsm100_platform |
| qualcomm | g1_gen_1_firmware |
| qualcomm | g1_gen_1 |
| qualcomm | g2_gen_1_firmware |
| qualcomm | g2_gen_1 |
| qualcomm | g3x_gen_2_firmware |
| qualcomm | g3x_gen_2 |
| qualcomm | iq-615_firmware |
| qualcomm | iq-615 |
| qualcomm | iq-8275_firmware |
| qualcomm | iq-8275 |
| qualcomm | iq-9075_firmware |
| qualcomm | iq-9075 |
| qualcomm | iqx5121_firmware |
| qualcomm | iqx5121 |
| qualcomm | iqx7181_firmware |
| qualcomm | iqx7181 |
| qualcomm | mbm415_firmware |
| qualcomm | mbm415 |
| qualcomm | monaco_iot_firmware |
| qualcomm | monaco_iot |
| qualcomm | netrani_firmware |
| qualcomm | netrani |
| qualcomm | qca0000_firmware |
| qualcomm | qca0000 |
| qualcomm | qca2066_firmware |
| qualcomm | qca2066 |
| qualcomm | qca4004_firmware |
| qualcomm | qca4004 |
| qualcomm | qca6391_firmware |
| qualcomm | qca6391 |
| qualcomm | qca6420_firmware |
| qualcomm | qca6420 |
| qualcomm | qca6430_firmware |
| qualcomm | qca6430 |
| qualcomm | qca6564_firmware |
| qualcomm | qca6564 |
| qualcomm | qca6564a_firmware |
| qualcomm | qca6564a |
| qualcomm | qca6564au_firmware |
| qualcomm | qca6564au |
| qualcomm | qca6574_firmware |
| qualcomm | qca6574 |
| qualcomm | qca6574a_firmware |
| qualcomm | qca6574a |
| qualcomm | qca6574au_firmware |
| qualcomm | qca6574au |
| qualcomm | qca6595_firmware |
| qualcomm | qca6595 |
| qualcomm | qca6595au_firmware |
| qualcomm | qca6595au |
| qualcomm | qca6688aq_firmware |
| qualcomm | qca6688aq |
| qualcomm | qca6696_firmware |
| qualcomm | qca6696 |
| qualcomm | qca6698aq_firmware |
| qualcomm | qca6698aq |
| qualcomm | wsa8845h_firmware |
| qualcomm | wsa8845h |
| qualcomm | sm6450p_firmware |
| qualcomm | sm6450p |
| qualcomm | sm6475p_firmware |
| qualcomm | sm6475p |
| qualcomm | sm6475q_firmware |
| qualcomm | sm6475q |
| qualcomm | sm7325p_firmware |
| qualcomm | sm7325p |
| qualcomm | sm7435_firmware |
| qualcomm | sm7435 |
| qualcomm | sm7435p_firmware |
| qualcomm | sm7435p |
| qualcomm | sm7525_firmware |
| qualcomm | sm7525 |
| qualcomm | sm7550_firmware |
| qualcomm | sm7550 |
| qualcomm | sm7550p_firmware |
| qualcomm | sm7550p |
| qualcomm | sm7635p_firmware |
| qualcomm | sm7635p |
| qualcomm | sm8475p_firmware |
| qualcomm | sm8475p |
| qualcomm | sm8550p_firmware |
| qualcomm | sm8550p |
| qualcomm | smart_audio_400_platform_firmware |
| qualcomm | smart_audio_400_platform |
| qualcomm | snapdragon_4_gen_1_mobile_platform_firmware |
| qualcomm | snapdragon_4_gen_1_mobile_platform |
| qualcomm | snapdragon_4_gen_2_mobile_platform_firmware |
| qualcomm | snapdragon_4_gen_2_mobile_platform |
| qualcomm | snapdragon_460_mobile_platform_firmware |
| qualcomm | snapdragon_460_mobile_platform |
| qualcomm | snapdragon_480_5g_mobile_platform_firmware |
| qualcomm | snapdragon_480_5g_mobile_platform |
| qualcomm | snapdragon_480\+_5g_mobile_platform_firmware |
| qualcomm | snapdragon_480\+_5g_mobile_platform |
| qualcomm | snapdragon_6_gen_1_mobile_platform_firmware |
| qualcomm | snapdragon_6_gen_1_mobile_platform |
| qualcomm | snapdragon_6_gen_3_mobile_platform_firmware |
| qualcomm | snapdragon_6_gen_3_mobile_platform |
| qualcomm | snapdragon_680_4g_mobile_platform_firmware |
| qualcomm | snapdragon_680_4g_mobile_platform |
| qualcomm | snapdragon_685_4g_mobile_platform_firmware |
| qualcomm | snapdragon_685_4g_mobile_platform |
| qualcomm | snapdragon_695_5g_mobile_platform_firmware |
| qualcomm | snapdragon_695_5g_mobile_platform |
| qualcomm | snapdragon_7_gen_1_mobile_platform_firmware |
| qualcomm | snapdragon_7_gen_1_mobile_platform |
| qualcomm | snapdragon_7\+_gen_2_mobile_platform_firmware |
| qualcomm | snapdragon_7\+_gen_2_mobile_platform |
| qualcomm | snapdragon_778g_5g_mobile_platform_firmware |
| qualcomm | snapdragon_778g_5g_mobile_platform |
| qualcomm | snapdragon_778g\+_5g_mobile_platform_firmware |
| qualcomm | snapdragon_778g\+_5g_mobile_platform |
| qualcomm | snapdragon_782g_mobile_platform_firmware |
| qualcomm | snapdragon_782g_mobile_platform |
| qualcomm | snapdragon_7c_compute_platform_firmware |
| qualcomm | snapdragon_7c_compute_platform |
| qualcomm | snapdragon_7c_gen_2_compute_platform_firmware |
| qualcomm | snapdragon_7c_gen_2_compute_platform |
| qualcomm | snapdragon_7c\+_gen_3_compute_firmware |
| qualcomm | snapdragon_7c\+_gen_3_compute |
| qualcomm | snapdragon_8_gen_1_mobile_platform_firmware |
| qualcomm | snapdragon_8_gen_1_mobile_platform |
| qualcomm | snapdragon_8_gen_2_mobile_platform_firmware |
| qualcomm | snapdragon_8_gen_2_mobile_platform |
| qualcomm | snapdragon_8\+_gen_1_mobile_platform_firmware |
| qualcomm | snapdragon_8\+_gen_1_mobile_platform |
| qualcomm | snapdragon_8\+_gen_2_mobile_platform_firmware |
| qualcomm | snapdragon_8\+_gen_2_mobile_platform |
| qualcomm | snapdragon_865\+_5g_mobile_platform_firmware |
| qualcomm | snapdragon_865\+_5g_mobile_platform |
| qualcomm | snapdragon_870_5g_mobile_platform_firmware |
| qualcomm | snapdragon_870_5g_mobile_platform |
| qualcomm | snapdragon_888_5g_mobile_platform_firmware |
| qualcomm | snapdragon_888_5g_mobile_platform |
| qualcomm | snapdragon_888\+_5g_mobile_platform_firmware |
| qualcomm | snapdragon_888\+_5g_mobile_platform |
| qualcomm | snapdragon_8c_compute_platform_firmware |
| qualcomm | snapdragon_8c_compute_platform |
| qualcomm | snapdragon_8c_compute_platform_\(sc8180xp-ad\)_firmware |
| qualcomm | snapdragon_8c_compute_platform_\(sc8180xp-ad\) |
| qualcomm | snapdragon_8cx_compute_platform_firmware |
| qualcomm | snapdragon_8cx_compute_platform |
| qualcomm | snapdragon_8cx_compute_platform_\"poipu_pro\"_firmware |
| qualcomm | snapdragon_8cx_compute_platform_\"poipu_pro\" |
| qualcomm | snapdragon_8cx_gen_2_5g_compute_platform_firmware |
| qualcomm | snapdragon_8cx_gen_2_5g_compute_platform |
| qualcomm | snapdragon_8cx_gen_2_5g_compute_platform_\"poipu_pro\"_firmware |
| qualcomm | snapdragon_8cx_gen_2_5g_compute_platform_\"poipu_pro\" |
| qualcomm | snapdragon_auto_5g_modem-rf_firmware |
| qualcomm | snapdragon_auto_5g_modem-rf |
| qualcomm | snapdragon_wear_1300_platform_firmware |
| qualcomm | snapdragon_wear_1300_platform |
| qualcomm | snapdragon_x53_5g_modem-rf_system_firmware |
| qualcomm | snapdragon_x53_5g_modem-rf_system |
| qualcomm | snapdragon_x55_5g_modem-rf_system_firmware |
| qualcomm | snapdragon_x55_5g_modem-rf_system |
| qualcomm | snapdragon_xr2_5g_platform_firmware |
| qualcomm | snapdragon_xr2_5g_platform |
| qualcomm | snapdragon_xr2\+_gen_1_platform_firmware |
| qualcomm | snapdragon_xr2\+_gen_1_platform |
| qualcomm | snapdragon_auto_4g_modem_firmware |
| qualcomm | snapdragon_auto_4g_modem |
| qualcomm | vision_intelligence_400_platform_firmware |
| qualcomm | vision_intelligence_400_platform |
| qualcomm | wcd9306_firmware |
| qualcomm | wcd9306 |
| qualcomm | wcd9335_firmware |
| qualcomm | wcd9335 |
| qualcomm | wcd9340_firmware |
| qualcomm | wcd9340 |
| qualcomm | wcd9341_firmware |
| qualcomm | wcd9341 |
| qualcomm | wcd9360_firmware |
| qualcomm | wcd9360 |
| qualcomm | wcd9370_firmware |
| qualcomm | wcd9370 |
| qualcomm | wcd9371_firmware |
| qualcomm | wcd9371 |
| qualcomm | wcd9375_firmware |
| qualcomm | wcd9375 |
| qualcomm | wcd9378_firmware |
| qualcomm | wcd9378 |
| qualcomm | wcd9380_firmware |
| qualcomm | wcd9380 |
| qualcomm | wcd9385_firmware |
| qualcomm | wcd9385 |
| qualcomm | wcd9390_firmware |
| qualcomm | wcd9390 |
| qualcomm | wcd9395_firmware |
| qualcomm | wcd9395 |
| qualcomm | wcn3910_firmware |
| qualcomm | wcn3910 |
| qualcomm | wcn3950_firmware |
| qualcomm | wcn3950 |
| qualcomm | wcn3980_firmware |
| qualcomm | wcn3980 |
| qualcomm | wcn3988_firmware |
| qualcomm | wcn3988 |
| qualcomm | wcn3990_firmware |
| qualcomm | wcn3990 |
| qualcomm | wcn6650_firmware |
| qualcomm | wcn6650 |
| qualcomm | wcn6755_firmware |
| qualcomm | wcn6755 |
| qualcomm | wsa8810_firmware |
| qualcomm | wsa8810 |
| qualcomm | wsa8815_firmware |
| qualcomm | wsa8815 |
| qualcomm | wsa8830_firmware |
| qualcomm | wsa8830 |
| qualcomm | wsa8832_firmware |
| qualcomm | wsa8832 |
| qualcomm | wsa8835_firmware |
| qualcomm | wsa8835 |
| qualcomm | wsa8840_firmware |
| qualcomm | wsa8840 |
| qualcomm | wsa8845_firmware |
| qualcomm | wsa8845 |
References
Frequently Asked Questions
What is CVE-2026-25267? +
How severe is CVE-2026-25267? +
What products are affected by CVE-2026-25267? +
How do I check if I'm vulnerable to CVE-2026-25267? +
Related Vulnerabilities
FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, the `load_customer_info` action in `POST /conversation/ajax` …
Concrete CMS below 9.5.3 conversation attachment uploaded endpoint imported files into the file manager before evaluating the "Add Message Attachments" …
GLPI is a free asset and IT management software package. Starting in version 0.78 and prior to versions 10.0.25 and …
Concrete CMS 9.2.0 to 9.5.2 contain a missing authorization vulnerability in the REST API Groups list endpoint. The listGroups() method …
In affected versions of Octopus Server, permissions were not checked correctly resulting in any authenticated user being able to make …
SOPlanning does not enforce authorization for backup functionalities. An unauthenticated attacker can directly query backup-related endpoints and retrieve backup archives …