6.9Medium
CVE-2026-25262Write-what-where Condition in Primary Bootloader
Description
Memory corruption while processing a crafted ELF file in the Primary Bootloader.
Weakness (CWE):
CWE-123
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| qualcomm | mdm9207 firmware | — | |
| qualcomm | mdm9645 firmware | — | |
| qualcomm | mdm9655 firmware | — | |
| qualcomm | mdm9665 firmware | — | |
| qualcomm | msm8909 firmware | — | |
| qualcomm | msm8916 firmware | — | |
| qualcomm | msm8952 firmware | — | |
| qualcomm | sdx50 firmware | — | |
| Qualcomm, Inc. | Snapdragon | MDM9x07, MDM9x45, MDM9x55, MDM9x65, MSM8909, MSM8916, MSM8952, SDX50 |
References and patches
CPE matches (NVD) (8)
cpe:2.3:o:qualcomm:mdm9207_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:mdm9655_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:mdm9665_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:msm8909_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:msm8916_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:msm8952_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:sdx50_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:mdm9645_firmware:-:*:*:*:*:*:*:*