CVE-2026-25275

Transient DOS when processing authentication frames with invalid FILS information element header lengths.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2026-bulletin.html

Configurations

No configuration.

History

17 Sep 2026, 05:17

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-09-17 05:17

Updated : 2026-09-17 15:16

NVD link : CVE-2026-25275

Mitre link : CVE-2026-25275

CVE.ORG link : CVE-2026-25275

JSON object : View

Products Affected

No product.

CWE

CWE-126

Buffer Over-read

{"id": "CVE-2026-25275", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-25275", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-17T14:35:40.315716Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "product-security@qualcomm.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "product-security@qualcomm.com", "affectedData": [{"vendor": "Qualcomm, Inc.", "product": "Snapdragon", "versions": [{"status": "affected", "version": "Snapdragon G1 Gen 2 Gaming Platform"}, {"status": "affected", "version": "5G Fixed Wireless Access Platform"}, {"status": "affected", "version": "AQT1000"}, {"status": "affected", "version": "AR8031"}, {"status": "affected", "version": "AR8035"}, {"status": "affected", "version": "C110100"}, {"status": "affected", "version": "Cologne"}, {"status": "affected", "version": "Congo"}, {"status": "affected", "version": "CQ2390M"}, {"status": "affected", "version": "CQ2390S"}, {"status": "affected", "version": "CQ7790"}, {"status": "affected", "version": "CQ7790M"}, {"status": "affected", "version": "CQ8725S"}, {"status": "affected", "version": "CQ8750M"}, {"status": "affected", "version": "CQ8845S"}, {"status": "affected", "version": "CSR8811"}, {"status": "affected", "version": "CSRA6620"}, {"status": "affected", "version": "CSRA6640"}, {"status": "affected", "version": "CSRB31024"}, {"status": "affected", "version": "FastConnect 6200"}, {"status": "affected", "version": "FastConnect 6700"}, {"status": "affected", "version": "FastConnect 6800"}, {"status": "affected", "version": "FastConnect 6900"}, {"status": "affected", "version": "FastConnect 7800"}, {"status": "affected", "version": "Flight RB5 5G Platform"}, {"status": "affected", "version": "FWA Gen 3 Ultra Platform"}, {"status": "affected", "version": "FWA Gen 5 Elite Platform"}, {"status": "affected", "version": "G1 Gen 1"}, {"status": "affected", "version": "G2 Gen 1"}, {"status": "affected", "version": "G3x Gen 2"}, {"status": "affected", "version": "Immersive Home 214 Platform"}, {"status": "affected", "version": "Immersive Home 216 Platform"}, {"status": "affected", "version": "Immersive Home 316 Platform"}, {"status": "affected", "version": "Immersive Home 318 Platform"}, {"status": "affected", "version": "Immersive Home 3210 Platform"}, {"status": "affected", "version": "Immersive Home 326 Platform"}, {"status": "affected", "version": "IPQ5010"}, {"status": "affected", "version": "IPQ5028"}, {"status": "affected", "version": "IPQ5302"}, {"status": "affected", "version": "IPQ5312"}, {"status": "affected", "version": "IPQ5332"}, {"status": "affected", "version": "IPQ6000"}, {"status": "affected", "version": "IPQ6010"}, {"status": "affected", "version": "IPQ6018"}, {"status": "affected", "version": "IPQ8070"}, {"status": "affected", "version": "IPQ8071"}, {"status": "affected", "version": "IPQ8072"}, {"status": "affected", "version": "IPQ8074"}, {"status": "affected", "version": "IPQ8076"}, {"status": "affected", "version": "IPQ8078"}, {"status": "affected", "version": "IPQ9008"}, {"status": "affected", "version": "IPQ9554"}, {"status": "affected", "version": "IPQ9570"}, {"status": "affected", "version": "IPQ9574"}, {"status": "affected", "version": "IQ10 Series"}, {"status": "affected", "version": "IQ6 Series Platform"}, {"status": "affected", "version": "IQ8 Series Platform"}, {"status": "affected", "version": "IQ9 Series Platform"}, {"status": "affected", "version": "IQX5121"}, {"status": "affected", "version": "IQX7181"}, {"status": "affected", "version": "Kalpeni"}, {"status": "affected", "version": "Kobuk"}, {"status": "affected", "version": "LeMans_AU_LGIT"}, {"status": "affected", "version": "LeMansAU"}, {"status": "affected", "version": "Marina"}, {"status": "affected", "version": "MBM415"}, {"status": "affected", "version": "MBM715"}, {"status": "affected", "version": "Milos"}, {"status": "affected", "version": "Milos_IOT"}, {"status": "affected", "version": "Monaco_IOT"}, {"status": "affected", "version": "Netrani"}, {"status": "affected", "version": "Networking Pro 1200 Platform"}, {"status": "affected", "version": "Networking Pro 1210 Platform"}, {"status": "affected", "version": "Networking Pro 1610 Platform"}, {"status": "affected", "version": "Networking Pro 400 Platform"}, {"status": "affected", "version": "Networking Pro 600 Platform"}, {"status": "affected", "version": "Networking Pro 610 Platform"}, {"status": "affected", "version": "Networking Pro 800 Platform"}, {"status": "affected", "version": "Networking Pro 810 Platform"}, {"status": "affected", "version": "NPro A8 Elite Platform"}, {"status": "affected", "version": "Orne"}, {"status": "affected", "version": "Palawan25"}, {"status": "affected", "version": "Pandeiro"}, {"status": "affected", "version": "PMP8074"}, {"status": "affected", "version": "Q-4390"}, {"status": "affected", "version": "Q-7790"}, {"status": "affected", "version": "QAM8255P"}, {"status": "affected", "version": "QAM8295P"}, {"status": "affected", "version": "QAMSRV1H"}, {"status": "affected", "version": "QAMSRV1M"}, {"status": "affected", "version": "QCA0000"}, {"status": "affected", "version": "QCA2062"}, {"status": "affected", "version": "QCA2064"}, {"status": "affected", "version": "QCA2065"}, {"status": "affected", "version": "QCA2066"}, {"status": "affected", "version": "QCA4024"}, {"status": "affected", "version": "QCA6391"}, {"status": "affected", "version": "QCA6420"}, {"status": "affected", "version": "QCA6428"}, {"status": "affected", "version": "QCA6430"}, {"status": "affected", "version": "QCA6438"}, {"status": "affected", "version": "QCA6554A"}, {"status": "affected", "version": "QCA6564AU"}, {"status": "affected", "version": "QCA6574"}, {"status": "affected", "version": "QCA6574A"}, {"status": "affected", "version": "QCA6574AU"}, {"status": "affected", "version": "QCA6584AU"}, {"status": "affected", "version": "QCA6595"}, {"status": "affected", "version": "QCA6595AU"}, {"status": "affected", "version": "QCA6678AQ"}, {"status": "affected", "version": "QCA6688AQ"}, {"status": "affected", "version": "QCA6696"}, {"status": "affected", "version": "QCA6698AQ"}, {"status": "affected", "version": "QCA6698AU"}, {"status": "affected", "version": "QCA6777AQ"}, {"status": "affected", "version": "QCA6787AQ"}, {"status": "affected", "version": "QCA6797AQ"}, {"status": "affected", "version": "QCA8072"}, {"status": "affected", "version": "QCA8075"}, {"status": "affected", "version": "QCA8080"}, {"status": "affected", "version": "QCA8081"}, {"status": "affected", "version": "QCA8082"}, {"status": "affected", "version": "QCA8084"}, {"status": "affected", "version": "QCA8085"}, {"status": "affected", "version": "QCA8337"}, {"status": "affected", "version": "QCA8386"}, {"status": "affected", "version": "QCA8695AU"}, {"status": "affected", "version": "QCA9888"}, {"status": "affected", "version": "QCA9889"}, {"status": "affected", "version": "QCC2070"}, {"status": "affected", "version": "QCC2073"}, {"status": "affected", "version": "QCC2076"}, {"status": "affected", "version": "QCC6705"}, {"status": "affected", "version": "QCC710"}, {"status": "affected", "version": "QCF8000"}, {"status": "affected", "version": "QCF8001"}, {"status": "affected", "version": "QCM2290"}, {"status": "affected", "version": "QCM4290"}, {"status": "affected", "version": "QCM4325"}, {"status": "affected", "version": "QCM4490"}, {"status": "affected", "version": "QCM5430"}, {"status": "affected", "version": "QCM6125"}, {"status": "affected", "version": "QCM6490"}, {"status": "affected", "version": "QCN5021"}, {"status": "affected", "version": "QCN5022"}, {"status": "affected", "version": "QCN5024"}, {"status": "affected", "version": "QCN5052"}, {"status": "affected", "version": "QCN5054"}, {"status": "affected", "version": "QCN5064"}, {"status": "affected", "version": "QCN5122"}, {"status": "affected", "version": "QCN5124"}, {"status": "affected", "version": "QCN5152"}, {"status": "affected", "version": "QCN5154"}, {"status": "affected", "version": "QCN5164"}, {"status": "affected", "version": "QCN5550"}, {"status": "affected", "version": "QCN6023"}, {"status": "affected", "version": "QCN6024"}, {"status": "affected", "version": "QCN6122"}, {"status": "affected", "version": "QCN6132"}, {"status": "affected", "version": "QCN6224"}, {"status": "affected", "version": "QCN6274"}, {"status": "affected", "version": "QCN6402"}, {"status": "affected", "version": "QCN6412"}, {"status": "affected", "version": "QCN6422"}, {"status": "affected", "version": "QCN6432"}, {"status": "affected", "version": "QCN7605"}, {"status": "affected", "version": "QCN7606"}, {"status": "affected", "version": "QCN9000"}, {"status": "affected", "version": "QCN9001"}, {"status": "affected", "version": "QCN9002"}, {"status": "affected", "version": "QCN9003"}, {"status": "affected", "version": "QCN9011"}, {"status": "affected", "version": "QCN9012"}, {"status": "affected", "version": "QCN9022"}, {"status": "affected", "version": "QCN9024"}, {"status": "affected", "version": "QCN9070"}, {"status": "affected", "version": "QCN9100"}, {"status": "affected", "version": "QCN9274"}, {"status": "affected", "version": "QCS2290"}, {"status": "affected", "version": "QCS4290"}, {"status": "affected", "version": "QCS4490"}, {"status": "affected", "version": "QCS6690"}, {"status": "affected", "version": "QCS8550"}, {"status": "affected", "version": "QFW7114"}, {"status": "affected", "version": "QFW7124"}, {"status": "affected", "version": "QLN1083BD"}, {"status": "affected", "version": "QLN1086BD"}, {"status": "affected", "version": "QMP1000"}, {"status": "affected", "version": "QMP2001"}, {"status": "affected", "version": "QPA1083BD"}, {"status": "affected", "version": "QPA1086BD"}, {"status": "affected", "version": "Qualcomm FastConnect 8800 Mobile Connectivity System"}, {"status": "affected", "version": "Qualcomm Video Collaboration VC1 Platform"}, {"status": "affected", "version": "Qualcomm Video Collaboration VC3 Platform"}, {"status": "affected", "version": "Qualcomm Video Collaboration VC5 Platform"}, {"status": "affected", "version": "QXM1083"}, {"status": "affected", "version": "QXM1086"}, {"status": "affected", "version": "QXM1093"}, {"status": "affected", "version": "QXM1094"}, {"status": "affected", "version": "QXM1095"}, {"status": "affected", "version": "QXM1096"}, {"status": "affected", "version": "Robotics RB2 Platform"}, {"status": "affected", "version": "Robotics RB5 Platform"}, {"status": "affected", "version": "SA4150P"}, {"status": "affected", "version": "SA4155P"}, {"status": "affected", "version": "SA510M"}, {"status": "affected", "version": "SA6145P"}, {"status": "affected", "version": "SA6150P"}, {"status": "affected", "version": "SA6155"}, {"status": "affected", "version": "SA6155P"}, {"status": "affected", "version": "SA7255P"}, {"status": "affected", "version": "SA7775P"}, {"status": "affected", "version": "SA8145P"}, {"status": "affected", "version": "SA8150P"}, {"status": "affected", "version": "SA8155"}, {"status": "affected", "version": "SA8155P"}, {"status": "affected", "version": "SA8195P"}, {"status": "affected", "version": "SA8255P"}, {"status": "affected", "version": "SA8295P"}, {"status": "affected", "version": "SA8620P"}, {"status": "affected", "version": "SA8770P"}, {"status": "affected", "version": "SA9000P"}, {"status": "affected", "version": "SAR1165P"}, {"status": "affected", "version": "SAR2130P"}, {"status": "affected", "version": "SC8380XP"}, {"status": "affected", "version": "SD 8 Gen1 5G"}, {"status": "affected", "version": "SD662"}, {"status": "affected", "version": "SD865 5G"}, {"status": "affected", "version": "SDA660"}, {"status": "affected", "version": "SDX65M"}, {"status": "affected", "version": "SDX81"}, {"status": "affected", "version": "SM4850"}, {"status": "affected", "version": "SM4850P"}, {"status": "affected", "version": "SM4875"}, {"status": "affected", "version": "SM6225P"}, {"status": "affected", "version": "SM6250"}, {"status": "affected", "version": "SM6450P"}, {"status": "affected", "version": "SM6475P"}, {"status": "affected", "version": "SM6475Q"}, {"status": "affected", "version": "SM6650P"}, {"status": "affected", "version": "SM6850"}, {"status": "affected", "version": "SM7325P"}, {"status": "affected", "version": "SM7435"}, {"status": "affected", "version": "SM7435P"}, {"status": "affected", "version": "SM7525"}, {"status": "affected", "version": "SM7550"}, {"status": "affected", "version": "SM7550P"}, {"status": "affected", "version": "SM7635P"}, {"status": "affected", "version": "SM7675"}, {"status": "affected", "version": "SM7675P"}, {"status": "affected", "version": "SM7750P"}, {"status": "affected", "version": "SM8475P"}, {"status": "affected", "version": "SM8550P"}, {"status": "affected", "version": "SM8635"}, {"status": "affected", "version": "SM8635P"}, {"status": "affected", "version": "SM8650Q"}, {"status": "affected", "version": "SM8735P"}, {"status": "affected", "version": "SM8750P"}, {"status": "affected", "version": "SM8845P"}, {"status": "affected", "version": "SM8950"}, {"status": "affected", "version": "SM8950P"}, {"status": "affected", "version": "SM8975"}, {"status": "affected", "version": "SM8975P"}, {"status": "affected", "version": "Smart Audio 400 Platform"}, {"status": "affected", "version": "Snapdragon 4 Gen 1 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 4 Gen 2 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 460 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 480 5G Mobile Platform"}, {"status": "affected", "version": "Snapdragon 480+ 5G Mobile Platform"}, {"status": "affected", "version": "Snapdragon 6 Gen 1 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 6 Gen 3 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 6 Gen 4 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 660 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 662 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 680 4G Mobile Platform"}, {"status": "affected", "version": "Snapdragon 685 4G Mobile Platform"}, {"status": "affected", "version": "Snapdragon 690 5G Mobile Platform"}, {"status": "affected", "version": "Snapdragon 695 5G Mobile Platform"}, {"status": "affected", "version": "Snapdragon 7 Gen 1 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 7 Gen 4 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 7+ Gen 2 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 778G 5G Mobile Platform"}, {"status": "affected", "version": "Snapdragon 778G+ 5G Mobile Platform"}, {"status": "affected", "version": "Snapdragon 782G Mobile Platform"}, {"status": "affected", "version": "Snapdragon 7c Compute Platform"}, {"status": "affected", "version": "Snapdragon 7c Gen 2 Compute Platform \"Rennell Pro\""}, {"status": "affected", "version": "Snapdragon 7c+ Gen 3 Compute"}, {"status": "affected", "version": "Snapdragon 7s Gen 3 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 8 Elite"}, {"status": "affected", "version": "Snapdragon 8 Elite Gen 5"}, {"status": "affected", "version": "Snapdragon 8 Gen 1 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 8 Gen 2 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 8 Gen 3 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 8 Gen 5"}, {"status": "affected", "version": "Snapdragon 8+ Gen 1 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 8+ Gen 2 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 865 5G Mobile Platform"}, {"status": "affected", "version": "Snapdragon 865+ 5G Mobile Platform"}, {"status": "affected", "version": "Snapdragon 870 5G Mobile Platform"}, {"status": "affected", "version": "Snapdragon 888 5G Mobile Platform"}, {"status": "affected", "version": "Snapdragon 888+ 5G Mobile Platform"}, {"status": "affected", "version": "Snapdragon 8c Compute Platform \"Poipu Lite\""}, {"status": "affected", "version": "Snapdragon 8c Compute Platform (SC8180XP-AD) \"Poipu Lite\""}, {"status": "affected", "version": "Snapdragon 8cx Compute Platform"}, {"status": "affected", "version": "Snapdragon 8cx Compute Platform \"Poipu Pro\""}, {"status": "affected", "version": "Snapdragon 8cx Gen 2 5G Compute Platform"}, {"status": "affected", "version": "Snapdragon 8cx Gen 2 5G Compute Platform \"Poipu Pro\""}, {"status": "affected", "version": "Snapdragon 8cx Gen 3 Compute Platform"}, {"status": "affected", "version": "Snapdragon AR1 Gen 1 Platform"}, {"status": "affected", "version": "Snapdragon AR1+ Gen 1 Platform"}, {"status": "affected", "version": "Snapdragon Auto 5G Modem-RF"}, {"status": "affected", "version": "Snapdragon Auto 5G Modem-RF Gen 2"}, {"status": "affected", "version": "Snapdragon Ride Elite"}, {"status": "affected", "version": "Snapdragon W5+ Gen 1 Wearable Platform"}, {"status": "affected", "version": "Snapdragon X2 Elite"}, {"status": "affected", "version": "Snapdragon X35 5G Modem-RF System"}, {"status": "affected", "version": "Snapdragon X53 5G Modem-RF System"}, {"status": "affected", "version": "Snapdragon X55 5G Modem-RF System"}, {"status": "affected", "version": "Snapdragon X65 5G Modem-RF System"}, {"status": "affected", "version": "Snapdragon X72 5G Modem-RF System"}, {"status": "affected", "version": "Snapdragon X75 5G Modem-RF System"}, {"status": "affected", "version": "Snapdragon XR2 5G Platform"}, {"status": "affected", "version": "Snapdragon XR2+ Gen 1 Platform"}, {"status": "affected", "version": "SnapdragonAuto 4GModem"}, {"status": "affected", "version": "Snapdragon Cockpit Elite"}, {"status": "affected", "version": "Snapdragon Reality Elite Platform"}, {"status": "affected", "version": "SRV1H"}, {"status": "affected", "version": "SRV1M"}, {"status": "affected", "version": "SW-only"}, {"status": "affected", "version": "SW5100"}, {"status": "affected", "version": "SW5100P"}, {"status": "affected", "version": "SXR2230P"}, {"status": "affected", "version": "SXR2250P"}, {"status": "affected", "version": "Trestles"}, {"status": "affected", "version": "Vision Intelligence 400 Platform"}, {"status": "affected", "version": "WCD9335"}, {"status": "affected", "version": "WCD9340"}, {"status": "affected", "version": "WCD9341"}, {"status": "affected", "version": "WCD9360"}, {"status": "affected", "version": "WCD9370"}, {"status": "affected", "version": "WCD9371"}, {"status": "affected", "version": "WCD9375"}, {"status": "affected", "version": "WCD9378"}, {"status": "affected", "version": "WCD9378C"}, {"status": "affected", "version": "WCD9380"}, {"status": "affected", "version": "WCD9385"}, {"status": "affected", "version": "WCD9390"}, {"status": "affected", "version": "WCD9395"}, {"status": "affected", "version": "WCN3910"}, {"status": "affected", "version": "WCN3950"}, {"status": "affected", "version": "WCN3980"}, {"status": "affected", "version": "WCN3988"}, {"status": "affected", "version": "WCN3990"}, {"status": "affected", "version": "WCN6450"}, {"status": "affected", "version": "WCN6650"}, {"status": "affected", "version": "WCN6755"}, {"status": "affected", "version": "WCN7760"}, {"status": "affected", "version": "WCN7860"}, {"status": "affected", "version": "WCN7861"}, {"status": "affected", "version": "WCN7880"}, {"status": "affected", "version": "WCN7881"}, {"status": "affected", "version": "WCN8841"}, {"status": "affected", "version": "WSA8810"}, {"status": "affected", "version": "WSA8815"}, {"status": "affected", "version": "WSA8830"}, {"status": "affected", "version": "WSA8832"}, {"status": "affected", "version": "WSA8835"}, {"status": "affected", "version": "WSA8840"}, {"status": "affected", "version": "WSA8845"}, {"status": "affected", "version": "WSA8845H"}, {"status": "affected", "version": "WSA8850"}, {"status": "affected", "version": "WSA8850W"}, {"status": "affected", "version": "WSA8855C"}, {"status": "affected", "version": "X1E80100"}, {"status": "affected", "version": "XRV7209"}, {"status": "affected", "version": "XRV9209"}], "platforms": ["Snapdragon Auto", "Snapdragon CCW", "Snapdragon Compute", "Snapdragon Connectivity", "Snapdragon Consumer Electronics Connectivity", "Snapdragon Consumer IOT", "Snapdragon Industrial IOT", "Snapdragon MC", "Snapdragon Mobile", "Snapdragon Voice & Music", "Snapdragon WBC", "Snapdragon Wearables", "Snapdragon Wired Infrastructure and Networking"], "defaultStatus": "unaffected"}]}], "published": "2026-09-17T05:17:00.510", "references": [{"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2026-bulletin.html", "source": "product-security@qualcomm.com"}], "vulnStatus": "Received", "weaknesses": [{"type": "Secondary", "source": "product-security@qualcomm.com", "description": [{"lang": "en", "value": "CWE-126"}]}], "descriptions": [{"lang": "en", "value": "Transient DOS when processing authentication frames with invalid FILS information element header lengths."}], "lastModified": "2026-09-17T15:16:45.353", "sourceIdentifier": "product-security@qualcomm.com"}