CVE-2026-25291
HIGHDescription
Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.
Is your site exposed to CVE-2026-25291?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
EPSS — Exploit Prediction
EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| qualcomm | sar1165p_firmware |
| qualcomm | sar1165p |
| qualcomm | sc8380xp_firmware |
| qualcomm | sc8380xp |
| qualcomm | snapdragon_662_mobile_platform_firmware |
| qualcomm | snapdragon_662_mobile_platform |
| qualcomm | sm4875_firmware |
| qualcomm | sm4875 |
| qualcomm | sm6225p_firmware |
| qualcomm | sm6225p |
| qualcomm | sm6850_firmware |
| qualcomm | sm6850 |
| qualcomm | sm7325p_firmware |
| qualcomm | sm7325p |
| qualcomm | sm7435_firmware |
| qualcomm | sm7435 |
| qualcomm | sm8845p_firmware |
| qualcomm | sm8845p |
| qualcomm | snapdragon_4_gen_1_mobile_platform_firmware |
| qualcomm | snapdragon_4_gen_1_mobile_platform |
| qualcomm | snapdragon_460_mobile_platform_firmware |
| qualcomm | snapdragon_460_mobile_platform |
| qualcomm | snapdragon_480_5g_mobile_platform_firmware |
| qualcomm | snapdragon_480_5g_mobile_platform |
| qualcomm | snapdragon_480\+_5g_mobile_platform_firmware |
| qualcomm | snapdragon_480\+_5g_mobile_platform |
| qualcomm | snapdragon_6_gen_1_mobile_platform_firmware |
| qualcomm | snapdragon_6_gen_1_mobile_platform |
| qualcomm | snapdragon_6_gen_3_mobile_platform_firmware |
| qualcomm | snapdragon_6_gen_3_mobile_platform |
| qualcomm | snapdragon_680_4g_mobile_platform_firmware |
| qualcomm | snapdragon_680_4g_mobile_platform |
| qualcomm | snapdragon_685_4g_mobile_platform_firmware |
| qualcomm | snapdragon_685_4g_mobile_platform |
| qualcomm | snapdragon_695_5g_mobile_platform_firmware |
| qualcomm | snapdragon_695_5g_mobile_platform |
| qualcomm | snapdragon_778g_5g_mobile_platform_firmware |
| qualcomm | snapdragon_778g_5g_mobile_platform |
| qualcomm | snapdragon_778g\+_5g_mobile_platform_firmware |
| qualcomm | snapdragon_778g\+_5g_mobile_platform |
| qualcomm | snapdragon_782g_mobile_platform_firmware |
| qualcomm | snapdragon_782g_mobile_platform |
| qualcomm | snapdragon_7c\+_gen_3_compute_firmware |
| qualcomm | snapdragon_7c\+_gen_3_compute |
| qualcomm | snapdragon_8_elite_firmware |
| qualcomm | snapdragon_8_elite |
| qualcomm | snapdragon_8_elite_gen_5_firmware |
| qualcomm | snapdragon_8_elite_gen_5 |
| qualcomm | snapdragon_8_gen_5_firmware |
| qualcomm | snapdragon_8_gen_5 |
| qualcomm | snapdragon_888_5g_mobile_platform_firmware |
| qualcomm | snapdragon_888_5g_mobile_platform |
| qualcomm | snapdragon_888\+_5g_mobile_platform_firmware |
| qualcomm | snapdragon_888\+_5g_mobile_platform |
| qualcomm | snapdragon_ar1_gen_1_platform_firmware |
| qualcomm | snapdragon_ar1_gen_1_platform |
| qualcomm | snapdragon_ar1\+_gen_1_platform_firmware |
| qualcomm | snapdragon_ar1\+_gen_1_platform |
| qualcomm | snapdragon_w5\+_gen_1_wearable_platform_firmware |
| qualcomm | snapdragon_w5\+_gen_1_wearable_platform |
| qualcomm | snapdragon_x53_5g_modem-rf_system_firmware |
| qualcomm | snapdragon_x53_5g_modem-rf_system |
| qualcomm | snapdragon_reality_elite_platform_firmware |
| qualcomm | snapdragon_reality_elite_platform |
| qualcomm | snapdragon_wear_elite_platform_firmware |
| qualcomm | snapdragon_wear_elite_platform |
| qualcomm | srv1h_firmware |
| qualcomm | srv1h |
| qualcomm | srv1m_firmware |
| qualcomm | srv1m |
| qualcomm | sw5100_firmware |
| qualcomm | sw5100 |
| qualcomm | sw5100p_firmware |
| qualcomm | sw5100p |
| qualcomm | themisto_firmware |
| qualcomm | themisto |
| qualcomm | wcd9370_firmware |
| qualcomm | wcd9370 |
| qualcomm | wcd9375_firmware |
| qualcomm | wcd9375 |
| qualcomm | cq8845s_firmware |
| qualcomm | cq8845s |
| qualcomm | cq8850ns_firmware |
| qualcomm | cq8850ns |
| qualcomm | fastconnect_6200_firmware |
| qualcomm | fastconnect_6200 |
| qualcomm | fastconnect_6700_firmware |
| qualcomm | fastconnect_6700 |
| qualcomm | fastconnect_6900_firmware |
| qualcomm | fastconnect_6900 |
| qualcomm | fastconnect_7800_firmware |
| qualcomm | fastconnect_7800 |
| qualcomm | iq-9075_firmware |
| qualcomm | iq-9075 |
| qualcomm | lemans_au_lgit_firmware |
| qualcomm | lemans_au_lgit |
| qualcomm | lemansau_firmware |
| qualcomm | lemansau |
| qualcomm | milos_iot_firmware |
| qualcomm | milos_iot |
| qualcomm | netrani_firmware |
| qualcomm | netrani |
| qualcomm | orne_firmware |
| qualcomm | orne |
| qualcomm | pandeiro_firmware |
| qualcomm | pandeiro |
| qualcomm | qam8255p_firmware |
| qualcomm | qam8255p |
| qualcomm | qamsrv1h_firmware |
| qualcomm | qamsrv1h |
| qualcomm | qamsrv1m_firmware |
| qualcomm | qamsrv1m |
| qualcomm | qca6391_firmware |
| qualcomm | qca6391 |
| qualcomm | qca6595_firmware |
| qualcomm | qca6595 |
| qualcomm | qca6698aq_firmware |
| qualcomm | qca6698aq |
| qualcomm | qca6797aq_firmware |
| qualcomm | qca6797aq |
| qualcomm | qcm4290_firmware |
| qualcomm | qcm4290 |
| qualcomm | qcm5430_firmware |
| qualcomm | qcm5430 |
| qualcomm | qcm6490_firmware |
| qualcomm | qcm6490 |
| qualcomm | qcs4290_firmware |
| qualcomm | qcs4290 |
| qualcomm | qln1083bd_firmware |
| qualcomm | qln1083bd |
| qualcomm | qln1086bd_firmware |
| qualcomm | qln1086bd |
| qualcomm | qmp1000_firmware |
| qualcomm | qmp1000 |
| qualcomm | qmp2001_firmware |
| qualcomm | qmp2001 |
| qualcomm | qpa1083bd_firmware |
| qualcomm | qpa1083bd |
| qualcomm | qpa1086bd_firmware |
| qualcomm | qpa1086bd |
| qualcomm | video_collaboration_vc1_platform_firmware |
| qualcomm | video_collaboration_vc1_platform |
| qualcomm | video_collaboration_vc3_platform_firmware |
| qualcomm | video_collaboration_vc3_platform |
| qualcomm | qxm1083_firmware |
| qualcomm | qxm1083 |
| qualcomm | qxm1086_firmware |
| qualcomm | qxm1086 |
| qualcomm | qxm1093_firmware |
| qualcomm | qxm1093 |
| qualcomm | qxm1094_firmware |
| qualcomm | qxm1094 |
| qualcomm | qxm1095_firmware |
| qualcomm | qxm1095 |
| qualcomm | qxm1096_firmware |
| qualcomm | qxm1096 |
| qualcomm | sa7255p_firmware |
| qualcomm | sa7255p |
| qualcomm | sa7775p_firmware |
| qualcomm | sa7775p |
| qualcomm | sa8155p_firmware |
| qualcomm | sa8155p |
| qualcomm | sa8255p_firmware |
| qualcomm | sa8255p |
| qualcomm | sa8620p_firmware |
| qualcomm | sa8620p |
| qualcomm | sa8770p_firmware |
| qualcomm | sa8770p |
| qualcomm | sa9000p_firmware |
| qualcomm | sa9000p |
| qualcomm | wcd9378_firmware |
| qualcomm | wcd9378 |
| qualcomm | wcd9380_firmware |
| qualcomm | wcd9380 |
| qualcomm | wcd9385_firmware |
| qualcomm | wcd9385 |
| qualcomm | wcd9395_firmware |
| qualcomm | wcd9395 |
| qualcomm | wcn3950_firmware |
| qualcomm | wcn3950 |
| qualcomm | wcn3980_firmware |
| qualcomm | wcn3980 |
| qualcomm | wcn3988_firmware |
| qualcomm | wcn3988 |
| qualcomm | wcn6450_firmware |
| qualcomm | wcn6450 |
| qualcomm | wcn6755_firmware |
| qualcomm | wcn6755 |
| qualcomm | wcn7760_firmware |
| qualcomm | wcn7760 |
| qualcomm | wcn7860_firmware |
| qualcomm | wcn7860 |
| qualcomm | wcn7861_firmware |
| qualcomm | wcn7861 |
| qualcomm | wcn7880_firmware |
| qualcomm | wcn7880 |
| qualcomm | wcn7881_firmware |
| qualcomm | wcn7881 |
| qualcomm | wsa8810_firmware |
| qualcomm | wsa8810 |
| qualcomm | wsa8815_firmware |
| qualcomm | wsa8815 |
| qualcomm | wsa8830_firmware |
| qualcomm | wsa8830 |
| qualcomm | wsa8832_firmware |
| qualcomm | wsa8832 |
| qualcomm | wsa8835_firmware |
| qualcomm | wsa8835 |
| qualcomm | wsa8840_firmware |
| qualcomm | wsa8840 |
| qualcomm | wsa8845_firmware |
| qualcomm | wsa8845 |
| qualcomm | wsa8845h_firmware |
| qualcomm | wsa8845h |
| qualcomm | wsa8850_firmware |
| qualcomm | wsa8850 |
| qualcomm | wsa8850w_firmware |
| qualcomm | wsa8850w |
| qualcomm | wsa8855c_firmware |
| qualcomm | wsa8855c |
| qualcomm | x1e80100_firmware |
| qualcomm | x1e80100 |
| qualcomm | xrv7209_firmware |
| qualcomm | xrv7209 |
| qualcomm | xrv9209_firmware |
| qualcomm | xrv9209 |
References
Frequently Asked Questions
What is CVE-2026-25291? +
How severe is CVE-2026-25291? +
What products are affected by CVE-2026-25291? +
How do I check if I'm vulnerable to CVE-2026-25291? +
Related Vulnerabilities
Buffa is a pure-Rust Protocol Buffers implementation with first-class protobuf editions support. Prior to 0.7.0, a soundness bug in the …
A heap use-after-free existed when importing the blank-width characters of an ODF number format. A position value read from the …
rust-openssl is a set of OpenSSL bindings for the Rust programming language. In affected versions `ssl::select_next_proto` can return a slice …
XZ Utils provide a general-purpose data-compression library plus command-line tools. In XZ Utils 5.3.3alpha to 5.8.0, the multithreaded .xz decoder …
c-ares is an asynchronous resolver library. From 1.32.3 through 1.34.4, there is a use-after-free in read_answers() when process_answer() may re-enqueue …
There is an issue in CPython when using `bytes.decode("unicode_escape", error="ignore|replace")`. If you are not using the "unicode_escape" encoding or an …