CVE-2026-25258

EUVD-2026-33823 · Published Jun 1, 2026

Memory corruption while processing IOCTL calls for escape operations.

Technologies

Qualcomm Wcd9380Qualcomm Qca0000 FirmwareQualcomm Fastconnect 7800Qualcomm Sc8380XpQualcomm Wsa8845 FirmwareQualcomm Wcd9385Qualcomm Wsa8840Qualcomm X2000077Qualcomm Wsa8845Qualcomm Wcd9380 FirmwareQualcomm Wsa8840 FirmwareQualcomm Iqx5121Qualcomm Fastconnect 6900Qualcomm Wsa8845H FirmwareQualcomm X2000092Qualcomm Iqx5121 FirmwareQualcomm Cologne FirmwareQualcomm X2000090 FirmwareQualcomm Xg101039Qualcomm Qca0000Qualcomm Xg101002Qualcomm X2000090Qualcomm Iqx7181Qualcomm X2000086 FirmwareQualcomm Wcd9385 FirmwareQualcomm X2000094Qualcomm X2000092 FirmwareQualcomm Iqx7181 FirmwareQualcomm Xg101032 FirmwareQualcomm Xg101032Qualcomm Fastconnect 6900 FirmwareQualcomm Fastconnect 7800 FirmwareQualcomm CologneQualcomm X2000086Qualcomm X2000094 FirmwareQualcomm Wcd9378C FirmwareQualcomm Xg101039 FirmwareQualcomm X2000077 FirmwareQualcomm Wsa8845HQualcomm Wcd9378CQualcomm Xg101002 FirmwareQualcomm Sc8380Xp Firmware

Weaknesses

CWE-125

CVSS scores

v3.17.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Privilege Escalation

T1068Exploitation for Privilege Escalation

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bulletin.html

Potentially impacted assets

See if this affects your attack surface