CVE-2026-25281
7.4 highEPSS 0.2%
High (7.4) in qualcomm. EPSS 0.2% chance of exploitation in the next 30 days.
Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation.
Severity
CVSS 3.1
7.4 highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 5% of CVEs (scores of 2026-10-31)
- CWE
- CWE-770
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:cologne_firmware
- qualcomm:fastconnect_7800_firmware
- qualcomm:snapdragon_x2_elite_firmware
- qualcomm:wcd9378c_firmware
- qualcomm:wsa8840_firmware
- qualcomm:wsa8845_firmware
- qualcomm:wsa8845h_firmware
References
Check your stackJSON