CVE-2026-25262Medium· 6.9▾ TwilightPoC availableMemory corruption while processing a crafted ELF file in the Primary Bootloader.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 38 · likelihood 0 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Sep 24.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.2%
0.2% → 0.2%
Last analysed / modified upstream
2 GitHub repos (last check)
Memory corruption while processing a crafted ELF file in the Primary Bootloader.
mdm9207_firmwaremdm9655_firmwaremdm9665_firmwaremsm8909_firmwaremsm8916_firmwaremsm8952_firmwaresdx50_firmwaremdm9645_firmwareRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-25255High· 8.8Exposed dangerous function lead to privilege escalation via gRPC server.
CVE-2026-25254Critical· 9.8Improper authorization leads to Remote Code Execution via SocketIO interface.
CVE-2025-47408High· 7.8Memory corruption when another driver calls an IOCTL with invalid input/output buffer.
CVE-2025-47407High· 7.8Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level.
CVE-2025-47406Medium· 6.1Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.
CVE-2025-47405High· 7.8Memory corruption when processing camera sensor input/output control codes with invalid output buffers.