Memory Corruption in Primary Bootloader Affecting Qualcomm Products
CVE-2026-25262

6.9MEDIUM

Key Information:

Vendor

Qualcomm
Status
Snapdragon
Vendor
CVE Published:
22 September 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-25262?

A memory corruption vulnerability exists within the Primary Bootloader when processing a specifically crafted ELF file. This flaw can lead to potential unauthorized access or execution of malicious code, posing significant security risks to devices utilizing affected Qualcomm Snapdragon processors. Users are urged to apply necessary mitigations and updates to protect against exploitation.

Affected Version(s)

Snapdragon Snapdragon Auto MDM9x07

Snapdragon Snapdragon Auto MDM9x45

Snapdragon Snapdragon Auto MDM9x55

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

cve-2026-25262-poc
Created by Starry2233

References

https://docs.qualcomm.com/product/publicresources/securit...

CVSS V3.1

Score:
6.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.