CVE-2026-25288

Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:qualcomm:orne_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:orne:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:qualcomm:palawan25_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:palawan25:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:qualcomm:pandeiro_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pandeiro:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:qualcomm:qln1083bd_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qln1083bd:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:qualcomm:qln1086bd_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qln1086bd:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:qualcomm:qmb715_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qmb715:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:qualcomm:qmp1000_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qmp1000:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:qualcomm:qmp2001_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qmp2001:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:qualcomm:qpa1083bd_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qpa1083bd:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:qualcomm:qpa1086bd_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qpa1086bd:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:qualcomm:qxm1093_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qxm1093:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:qualcomm:qxm1094_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qxm1094:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:qualcomm:qxm1095_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qxm1095:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:qualcomm:qxm1096_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qxm1096:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:qualcomm:sc8380xp_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sc8380xp:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:qualcomm:sm6850_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm6850:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:qualcomm:sm8735p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8735p:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:qualcomm:sm8845p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8845p:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_7_gen_4_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_7_gen_4_mobile_platform:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_8_elite_gen_5_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_8_elite_gen_5:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9370:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:qualcomm:wcd9378_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9378:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:qualcomm:wcd9378c_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9378c:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9385:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND
cpe:2.3:o:qualcomm:wcd9395_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9395:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND
cpe:2.3:o:qualcomm:wcn6450_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn6450:-:*:*:*:*:*:*:*

Configuration 28 (hide)

AND
cpe:2.3:o:qualcomm:wcn6755_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn6755:-:*:*:*:*:*:*:*

Configuration 29 (hide)

AND
cpe:2.3:o:qualcomm:wcn7760_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn7760:-:*:*:*:*:*:*:*

Configuration 30 (hide)

AND
cpe:2.3:o:qualcomm:wcn7860_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn7860:-:*:*:*:*:*:*:*

Configuration 31 (hide)

AND
cpe:2.3:o:qualcomm:wcn7861_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn7861:-:*:*:*:*:*:*:*

Configuration 32 (hide)

AND
cpe:2.3:o:qualcomm:wcn7880_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn7880:-:*:*:*:*:*:*:*

Configuration 33 (hide)

AND
cpe:2.3:o:qualcomm:wcn7881_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn7881:-:*:*:*:*:*:*:*

Configuration 34 (hide)

AND
cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8840:-:*:*:*:*:*:*:*

Configuration 35 (hide)

AND
cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8845:-:*:*:*:*:*:*:*

Configuration 36 (hide)

AND
cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8845h:-:*:*:*:*:*:*:*

Configuration 37 (hide)

AND
cpe:2.3:o:qualcomm:wsa8850_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8850:-:*:*:*:*:*:*:*

Configuration 38 (hide)

AND
cpe:2.3:o:qualcomm:wsa8850w_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8850w:-:*:*:*:*:*:*:*

Configuration 39 (hide)

AND
cpe:2.3:o:qualcomm:wsa8855c_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8855c:-:*:*:*:*:*:*:*

Configuration 40 (hide)

AND
cpe:2.3:o:qualcomm:x2000077_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:x2000077:-:*:*:*:*:*:*:*

Configuration 41 (hide)

AND
cpe:2.3:o:qualcomm:cologne_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:cologne:-:*:*:*:*:*:*:*

Configuration 42 (hide)

AND
cpe:2.3:o:qualcomm:cq7790_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:cq7790:-:*:*:*:*:*:*:*

Configuration 43 (hide)

AND
cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:fastconnect_6900:-:*:*:*:*:*:*:*

Configuration 44 (hide)

AND
cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:fastconnect_7800:-:*:*:*:*:*:*:*

Configuration 45 (hide)

AND
cpe:2.3:o:qualcomm:molokai_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:molokai:-:*:*:*:*:*:*:*

Configuration 46 (hide)

AND
cpe:2.3:o:qualcomm:x2000086_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:x2000086:-:*:*:*:*:*:*:*

Configuration 47 (hide)

AND
cpe:2.3:o:qualcomm:x2000090_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:x2000090:-:*:*:*:*:*:*:*

Configuration 48 (hide)

AND
cpe:2.3:o:qualcomm:x2000092_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:x2000092:-:*:*:*:*:*:*:*

Configuration 49 (hide)

AND
cpe:2.3:o:qualcomm:x2000094_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:x2000094:-:*:*:*:*:*:*:*

Configuration 50 (hide)

AND
cpe:2.3:o:qualcomm:xg101002_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:xg101002:-:*:*:*:*:*:*:*

Configuration 51 (hide)

AND
cpe:2.3:o:qualcomm:xg101032_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:xg101032:-:*:*:*:*:*:*:*

Configuration 52 (hide)

AND
cpe:2.3:o:qualcomm:xg101039_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:xg101039:-:*:*:*:*:*:*:*

Configuration 53 (hide)

AND
cpe:2.3:o:qualcomm:xrv7209_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:xrv7209:-:*:*:*:*:*:*:*

Configuration 54 (hide)

AND
cpe:2.3:o:qualcomm:xrv9209_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:xrv9209:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2026-08-04 16:16

Updated : 2026-08-06 18:35


NVD link : CVE-2026-25288

Mitre link : CVE-2026-25288

CVE.ORG link : CVE-2026-25288


JSON object : View

Products Affected

qualcomm

  • wcn6450_firmware
  • snapdragon_8_elite_gen_5_firmware
  • qpa1083bd
  • qxm1096
  • wcn7880
  • x2000092
  • sc8380xp_firmware
  • qxm1093_firmware
  • snapdragon_8_elite_gen_5
  • wcn7760
  • wsa8840
  • wcd9395
  • orne
  • molokai
  • qxm1096_firmware
  • qmp2001_firmware
  • pandeiro
  • wcd9378c_firmware
  • cologne
  • wcd9380
  • wcn6755_firmware
  • orne_firmware
  • qxm1095
  • qln1083bd_firmware
  • qxm1094
  • qmb715
  • qpa1083bd_firmware
  • wcn7881_firmware
  • wsa8845
  • qxm1093
  • molokai_firmware
  • wsa8845_firmware
  • xg101032_firmware
  • palawan25_firmware
  • wcd9378
  • wsa8850w_firmware
  • wsa8850
  • x2000090_firmware
  • wsa8850w
  • wcn7860_firmware
  • x2000092_firmware
  • cologne_firmware
  • xg101002
  • wcd9395_firmware
  • qpa1086bd_firmware
  • wsa8845h
  • cq7790
  • xg101002_firmware
  • wsa8855c
  • qln1083bd
  • snapdragon_7_gen_4_mobile_platform
  • x2000094
  • xg101032
  • qmp1000_firmware
  • wcn7880_firmware
  • qxm1095_firmware
  • qmp2001
  • wcd9370
  • snapdragon_7_gen_4_mobile_platform_firmware
  • wcn6755
  • sm8845p
  • wsa8855c_firmware
  • wcn7860
  • wcd9378_firmware
  • qmb715_firmware
  • wcd9378c
  • sm6850_firmware
  • sm6850
  • wcd9385_firmware
  • xrv9209_firmware
  • xrv9209
  • wcn7760_firmware
  • qmp1000
  • sm8735p
  • palawan25
  • x2000086
  • fastconnect_6900_firmware
  • xg101039_firmware
  • qln1086bd
  • xg101039
  • qxm1094_firmware
  • x2000094_firmware
  • wsa8845h_firmware
  • cq7790_firmware
  • sm8735p_firmware
  • sm8845p_firmware
  • wcn6450
  • fastconnect_7800_firmware
  • x2000086_firmware
  • wcn7861
  • fastconnect_7800
  • x2000090
  • x2000077_firmware
  • qpa1086bd
  • wcn7881
  • wsa8850_firmware
  • wcd9385
  • wcn7861_firmware
  • xrv7209
  • fastconnect_6900
  • pandeiro_firmware
  • wcd9370_firmware
  • x2000077
  • xrv7209_firmware
  • qln1086bd_firmware
  • sc8380xp
  • wsa8840_firmware
  • wcd9380_firmware
CWE
CWE-126

Buffer Over-read