7.3High
CVE-2026-25284Buffer Over-read in OOBM
Description
Information Disclosure when a pointer is reused after being deallocated.
Weakness (CWE):
CWE-126
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| qualcomm | cologne firmware | — | |
| qualcomm | fastconnect 7800 firmware | — | |
| Qualcomm, Inc. | Snapdragon | Cologne, FastConnect 7800, Snapdragon X2 Elite, WCD9378C, WSA8840, WSA8845, WSA8845H | |
| qualcomm | snapdragon x2 elite firmware | — | |
| qualcomm | wcd9378c firmware | — | |
| qualcomm | wsa8840 firmware | — | |
| qualcomm | wsa8845 firmware | — | |
| qualcomm | wsa8845h firmware | — |
References and patches
CPE matches (NVD) (7)
cpe:2.3:o:qualcomm:cologne_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:snapdragon_x2_elite_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:wcd9378c_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:*