Denial of Service Vulnerability in Qualcomm Products
CVE-2026-25281

7.4HIGH

Key Information:

Vendor

Qualcomm
Status
Snapdragon
Vendor
CVE Published:
17 September 2026

What is CVE-2026-25281?

A transient denial of service vulnerability exists in Qualcomm Network Services due to improper validation of memory allocation when processing large or numerous request buffers. An attacker could exploit this vulnerability to cause interruption of service, leading to an impact on device availability. It is crucial for users to patch their systems to prevent potential disruptions and enhance overall security.

Affected Version(s)

Snapdragon Snapdragon Compute Cologne

Snapdragon Snapdragon Compute FastConnect 7800

Snapdragon Snapdragon Compute Snapdragon X2 Elite

References

https://docs.qualcomm.com/product/publicresources/securit...

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.