Information Disclosure in Qualcomm Products
CVE-2026-25284

7.3HIGH

Key Information:

Vendor

Qualcomm
Status
Snapdragon
Vendor
CVE Published:
17 September 2026

What is CVE-2026-25284?

An issue exists within Qualcomm products where sensitive information may be disclosed due to the reuse of pointers after they have been deallocated. This could potentially allow attackers to exploit the system by accessing data that should have been cleared from memory, leading to unauthorized information exposure.

Affected Version(s)

Snapdragon Snapdragon Compute Cologne

Snapdragon Snapdragon Compute FastConnect 7800

Snapdragon Snapdragon Compute Snapdragon X2 Elite

References

https://docs.qualcomm.com/product/publicresources/securit...

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.