CVE-2026-25268
HIGHDescription
Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations.
Is your site exposed to CVE-2026-25268?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
EPSS — Exploit Prediction
EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| qualcomm | wsa8835_firmware |
| qualcomm | wsa8835 |
| qualcomm | 5g_fixed_wireless_access_platform_firmware |
| qualcomm | 5g_fixed_wireless_access_platform |
| qualcomm | ar8035_firmware |
| qualcomm | ar8035 |
| qualcomm | cq7790_firmware |
| qualcomm | cq7790 |
| qualcomm | cq8725s_firmware |
| qualcomm | cq8725s |
| qualcomm | qca4024_firmware |
| qualcomm | qca4024 |
| qualcomm | qca6174a_firmware |
| qualcomm | qca6174a |
| qualcomm | qca8075_firmware |
| qualcomm | qca8075 |
| qualcomm | qca8080_firmware |
| qualcomm | qca8080 |
| qualcomm | qca8081_firmware |
| qualcomm | qca8081 |
| qualcomm | qca8082_firmware |
| qualcomm | qca8082 |
| qualcomm | qca8084_firmware |
| qualcomm | qca8084 |
| qualcomm | qca8085_firmware |
| qualcomm | qca8085 |
| qualcomm | qca8101_firmware |
| qualcomm | qca8101 |
| qualcomm | qca8102_firmware |
| qualcomm | qca8102 |
| qualcomm | qca8111_firmware |
| qualcomm | qca8111 |
| qualcomm | qca8112_firmware |
| qualcomm | qca8112 |
| qualcomm | qca8337_firmware |
| qualcomm | qca8337 |
| qualcomm | qca8384_firmware |
| qualcomm | qca8384 |
| qualcomm | qca8385_firmware |
| qualcomm | qca8385 |
| qualcomm | qca8386_firmware |
| qualcomm | qca8386 |
| qualcomm | qca9888_firmware |
| qualcomm | qca9888 |
| qualcomm | qca9889_firmware |
| qualcomm | qca9889 |
| qualcomm | qcc710_firmware |
| qualcomm | qcc710 |
| qualcomm | qcf8000_firmware |
| qualcomm | qcf8000 |
| qualcomm | qcf8001_firmware |
| qualcomm | qcf8001 |
| qualcomm | qcm5430_firmware |
| qualcomm | qcm5430 |
| qualcomm | qcm6490_firmware |
| qualcomm | qcm6490 |
| qualcomm | qcn5022_firmware |
| qualcomm | qcn5022 |
| qualcomm | qcn5024_firmware |
| qualcomm | qcn5024 |
| qualcomm | qcn5052_firmware |
| qualcomm | qcn5052 |
| qualcomm | qcn5122_firmware |
| qualcomm | qcn5122 |
| qualcomm | qcn5124_firmware |
| qualcomm | qcn5124 |
| qualcomm | qcn5152_firmware |
| qualcomm | qcn5152 |
| qualcomm | qcn5154_firmware |
| qualcomm | qcn5154 |
| qualcomm | qcn5164_firmware |
| qualcomm | qcn5164 |
| qualcomm | qcn5224_firmware |
| qualcomm | qcn5224 |
| qualcomm | qcn6023_firmware |
| qualcomm | qcn6023 |
| qualcomm | qcn6024_firmware |
| qualcomm | qcn6024 |
| qualcomm | qcn6112_firmware |
| qualcomm | qcn6112 |
| qualcomm | qcn6122_firmware |
| qualcomm | qcn6122 |
| qualcomm | qcn6132_firmware |
| qualcomm | qcn6132 |
| qualcomm | qcn6224_firmware |
| qualcomm | qcn6224 |
| qualcomm | qcn6274_firmware |
| qualcomm | qcn6274 |
| qualcomm | qcn6402_firmware |
| qualcomm | qcn6402 |
| qualcomm | csr8811_firmware |
| qualcomm | csr8811 |
| qualcomm | fastconnect_6700_firmware |
| qualcomm | fastconnect_6700 |
| qualcomm | fastconnect_6900_firmware |
| qualcomm | fastconnect_6900 |
| qualcomm | fastconnect_7800_firmware |
| qualcomm | fastconnect_7800 |
| qualcomm | fwa_gen_3_ultra_firmware |
| qualcomm | fwa_gen_3_ultra |
| qualcomm | fwa_gen_5_elite_firmware |
| qualcomm | fwa_gen_5_elite |
| qualcomm | immersive_home_214_platform_firmware |
| qualcomm | immersive_home_214_platform |
| qualcomm | immersive_home_216_platform_firmware |
| qualcomm | immersive_home_216_platform |
| qualcomm | immersive_home_316_platform_firmware |
| qualcomm | immersive_home_316_platform |
| qualcomm | immersive_home_318_platform_firmware |
| qualcomm | immersive_home_318_platform |
| qualcomm | immersive_home_3210_platform_firmware |
| qualcomm | immersive_home_3210_platform |
| qualcomm | immersive_home_326_platform_firmware |
| qualcomm | immersive_home_326_platform |
| qualcomm | ipq5010_firmware |
| qualcomm | ipq5010 |
| qualcomm | ipq5028_firmware |
| qualcomm | ipq5028 |
| qualcomm | ipq5300_firmware |
| qualcomm | ipq5300 |
| qualcomm | ipq5302_firmware |
| qualcomm | ipq5302 |
| qualcomm | ipq5312_firmware |
| qualcomm | ipq5312 |
| qualcomm | ipq5332_firmware |
| qualcomm | ipq5332 |
| qualcomm | ipq6000_firmware |
| qualcomm | ipq6000 |
| qualcomm | ipq6010_firmware |
| qualcomm | ipq6010 |
| qualcomm | ipq6018_firmware |
| qualcomm | ipq6018 |
| qualcomm | ipq8076_firmware |
| qualcomm | ipq8076 |
| qualcomm | ipq8078_firmware |
| qualcomm | ipq8078 |
| qualcomm | ipq9008_firmware |
| qualcomm | ipq9008 |
| qualcomm | ipq9048_firmware |
| qualcomm | ipq9048 |
| qualcomm | ipq9554_firmware |
| qualcomm | ipq9554 |
| qualcomm | ipq9570_firmware |
| qualcomm | ipq9570 |
| qualcomm | ipq9574_firmware |
| qualcomm | ipq9574 |
| qualcomm | kobuk_firmware |
| qualcomm | kobuk |
| qualcomm | marina_firmware |
| qualcomm | marina |
| qualcomm | networking_pro_1200_platform_firmware |
| qualcomm | networking_pro_1200_platform |
| qualcomm | networking_pro_1210_platform_firmware |
| qualcomm | networking_pro_1210_platform |
| qualcomm | networking_pro_1610_platform_firmware |
| qualcomm | networking_pro_1610_platform |
| qualcomm | networking_pro_400_platform_firmware |
| qualcomm | networking_pro_400_platform |
| qualcomm | networking_pro_600_platform_firmware |
| qualcomm | networking_pro_600_platform |
| qualcomm | networking_pro_610_platform_firmware |
| qualcomm | networking_pro_610_platform |
| qualcomm | networking_pro_800_platform_firmware |
| qualcomm | networking_pro_800_platform |
| qualcomm | networking_pro_810_platform_firmware |
| qualcomm | networking_pro_810_platform |
| qualcomm | orne_firmware |
| qualcomm | orne |
| qualcomm | qca0000_firmware |
| qualcomm | qca0000 |
| qualcomm | qcn6412_firmware |
| qualcomm | qcn6412 |
| qualcomm | qcn6422_firmware |
| qualcomm | qcn6422 |
| qualcomm | qcn6432_firmware |
| qualcomm | qcn6432 |
| qualcomm | qcn9000_firmware |
| qualcomm | qcn9000 |
| qualcomm | qcn9012_firmware |
| qualcomm | qcn9012 |
| qualcomm | qcn9013_firmware |
| qualcomm | qcn9013 |
| qualcomm | qcn9022_firmware |
| qualcomm | qcn9022 |
| qualcomm | qcn9024_firmware |
| qualcomm | qcn9024 |
| qualcomm | qcn9070_firmware |
| qualcomm | qcn9070 |
| qualcomm | qcn9100_firmware |
| qualcomm | qcn9100 |
| qualcomm | qcn9160_firmware |
| qualcomm | qcn9160 |
| qualcomm | qcn9274_firmware |
| qualcomm | qcn9274 |
| qualcomm | qfw7114_firmware |
| qualcomm | qfw7114 |
| qualcomm | qfw7124_firmware |
| qualcomm | qfw7124 |
| qualcomm | qfw7224_firmware |
| qualcomm | qfw7224 |
| qualcomm | qmx82l_firmware |
| qualcomm | qmx82l |
| qualcomm | qmx85l_firmware |
| qualcomm | qmx85l |
| qualcomm | video_collaboration_vc3_platform_firmware |
| qualcomm | video_collaboration_vc3_platform |
| qualcomm | qxm8083_firmware |
| qualcomm | qxm8083 |
| qualcomm | sar2130p_firmware |
| qualcomm | sar2130p |
| qualcomm | sdx61_firmware |
| qualcomm | sdx61 |
| qualcomm | sdx65m_firmware |
| qualcomm | sdx65m |
| qualcomm | sdx81_firmware |
| qualcomm | sdx81 |
| qualcomm | snapdragon_460_mobile_platform_firmware |
| qualcomm | snapdragon_460_mobile_platform |
| qualcomm | snapdragon_662_mobile_platform_firmware |
| qualcomm | snapdragon_662_mobile_platform |
| qualcomm | snapdragon_auto_5g_modem-rf_firmware |
| qualcomm | snapdragon_auto_5g_modem-rf |
| qualcomm | snapdragon_x62_5g_modem-rf_system_firmware |
| qualcomm | snapdragon_x62_5g_modem-rf_system |
| qualcomm | snapdragon_x65_5g_modem-rf_system_firmware |
| qualcomm | snapdragon_x65_5g_modem-rf_system |
| qualcomm | snapdragon_x72_5g_modem-rf_system_firmware |
| qualcomm | snapdragon_x72_5g_modem-rf_system |
| qualcomm | snapdragon_x75_5g_modem-rf_system_firmware |
| qualcomm | snapdragon_x75_5g_modem-rf_system |
| qualcomm | sw-only_firmware |
| qualcomm | sw-only |
| qualcomm | wcd9340_firmware |
| qualcomm | wcd9340 |
| qualcomm | wcd9370_firmware |
| qualcomm | wcd9370 |
| qualcomm | wcd9375_firmware |
| qualcomm | wcd9375 |
| qualcomm | wcd9380_firmware |
| qualcomm | wcd9380 |
| qualcomm | wcd9385_firmware |
| qualcomm | wcd9385 |
| qualcomm | wcn3950_firmware |
| qualcomm | wcn3950 |
| qualcomm | wcn3988_firmware |
| qualcomm | wcn3988 |
| qualcomm | wcn6755_firmware |
| qualcomm | wcn6755 |
| qualcomm | wcn7861_firmware |
| qualcomm | wcn7861 |
| qualcomm | wcn7881_firmware |
| qualcomm | wcn7881 |
| qualcomm | wsa8830_firmware |
| qualcomm | wsa8830 |
| qualcomm | wsa8832_firmware |
| qualcomm | wsa8832 |
References
Frequently Asked Questions
What is CVE-2026-25268? +
How severe is CVE-2026-25268? +
What products are affected by CVE-2026-25268? +
How do I check if I'm vulnerable to CVE-2026-25268? +
Related Vulnerabilities
A stack‑based buffer overflow vulnerability exists in Tapo C520WS v2 in the ONVIF CreateUsers service, where the device fails to …
LibreOffice can import presentations in the legacy binary PPT format. A stack buffer overflow existed when importing a colour-replacement record. …
editorconfig-core-c is an EditorConfig core library for use by plugins supporting EditorConfig parsing. Versions up to and including 0.12.10 have …
Under certain circumstances the iSTAR Configuration Utility (ICU) tool could have a buffer overflow issue
A stack buffer overflow has been identified in the AsIO3.sys driver. This vulnerability can be triggered by input manipulation, may …
CWE-121: Stack-based Buffer Overflow vulnerability exists that could cause local attackers being able to exploit these issues to potentially execute …