6.9Mittel
CVE-2026-25262Write-what-where Condition in Primary Bootloader
Beschreibung
Memory corruption while processing a crafted ELF file in the Primary Bootloader.
Schwachstellentyp (CWE):
CWE-123
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| qualcomm | mdm9207 firmware | — | |
| qualcomm | mdm9645 firmware | — | |
| qualcomm | mdm9655 firmware | — | |
| qualcomm | mdm9665 firmware | — | |
| qualcomm | msm8909 firmware | — | |
| qualcomm | msm8916 firmware | — | |
| qualcomm | msm8952 firmware | — | |
| qualcomm | sdx50 firmware | — | |
| Qualcomm, Inc. | Snapdragon | MDM9x07, MDM9x45, MDM9x55, MDM9x65, MSM8909, MSM8916, MSM8952, SDX50 |
Referenzen und Patches
CPE-Treffer (NVD) (8)
cpe:2.3:o:qualcomm:mdm9207_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:mdm9655_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:mdm9665_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:msm8909_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:msm8916_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:msm8952_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:sdx50_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:mdm9645_firmware:-:*:*:*:*:*:*:*