VulnerabilityAnalyzed
CVE-2026-25263
Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
MEDIUM 6.6EPSS 0.06%
Does this matter?
Lower severity and a low EPSS score (0.06%). Track it; it rarely justifies an emergency change on its own.
Description
Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
- CVSS 3.1
- 6.6 MEDIUMCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:L
- EPSS
- 0.06% probability · 0th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-787
- Affected
- qualcomm/snapdragon g1 gen 2 gaming platform firmware · qualcomm/5g fixed wireless access platform firmware · qualcomm/9205 lte modem firmware · qualcomm/9205s modem firmware · qualcomm/aqt1000 firmware · qualcomm/snapdragon 8c compute platform \(sc8180xp-ad\) firmware · qualcomm/snapdragon 8cx compute platform firmware · qualcomm/snapdragon 8cx compute platform \"poipu pro\" firmware · qualcomm/snapdragon 8cx gen 2 5g compute platform firmware · qualcomm/snapdragon 8cx gen 2 5g compute platform \"poipu pro\" firmware · qualcomm/snapdragon auto 5g modem-rf firmware · qualcomm/snapdragon wear 1300 platform firmware · qualcomm/snapdragon x53 5g modem-rf system firmware · qualcomm/snapdragon x55 5g modem-rf system firmware · qualcomm/snapdragon xr2 5g platform firmware · qualcomm/snapdragon xr2\+ gen 1 platform firmware · qualcomm/snapdragon auto 4g modem firmware · qualcomm/vision intelligence 400 platform firmware · qualcomm/wcd9306 firmware · qualcomm/wcd9335 firmware · +40 more
- Source
- product-security@qualcomm.com
EPSS moved from 0.1% on 6 October 2026 to 0.1% on 26 October 2026.
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.