DOS Vulnerability in Qualcomm Products for Short Target Wake Time Channel Usage
CVE-2026-25288

7.4HIGH

Key Information:

Vendor

Qualcomm
Status
Snapdragon
Vendor
CVE Published:
4 August 2026

What is CVE-2026-25288?

A denial-of-service vulnerability exists in Qualcomm wireless communication products when handling a short target wake time channel usage response frame. The packet size is insufficient, leading to potential service disruptions for devices utilizing affected components. This could impact reliability and performance, especially in high-demand environments, where consistent wireless communication is crucial.

Affected Version(s)

Snapdragon Snapdragon Auto Cologne

Snapdragon Snapdragon Auto CQ7790

Snapdragon Snapdragon Auto FastConnect 6900

References

https://docs.qualcomm.com/product/publicresources/securit...

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.