---
id: CVE-2026-25263
title: >-
  Memory corruption while processing IOCTL command called from user space to the
  kernel with invalid parameters.
summary: >-
  Memory corruption while processing IOCTL command called from user space to the
  kernel with invalid parameters.
severity: medium
cvss: 6.6
cvssVector: 'CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:L'
cwe:
  - CWE-787
vendor: qualcomm
product: snapdragon_g1_gen_2_gaming_platform_firmware
affected:
  - snapdragon_g1_gen_2_gaming_platform_firmware
  - 5g_fixed_wireless_access_platform_firmware
  - 9205_lte_modem_firmware
  - 9205s_modem_firmware
  - aqt1000_firmware
  - snapdragon_8c_compute_platform_(sc8180xp-ad)_firmware
  - snapdragon_8cx_compute_platform_firmware
  - snapdragon_8cx_compute_platform_"poipu_pro"_firmware
  - snapdragon_8cx_gen_2_5g_compute_platform_firmware
  - snapdragon_8cx_gen_2_5g_compute_platform_"poipu_pro"_firmware
  - snapdragon_auto_5g_modem-rf_firmware
  - snapdragon_wear_1300_platform_firmware
  - snapdragon_x53_5g_modem-rf_system_firmware
  - snapdragon_x55_5g_modem-rf_system_firmware
  - snapdragon_xr2_5g_platform_firmware
  - snapdragon_xr2+_gen_1_platform_firmware
  - snapdragon_auto_4g_modem_firmware
  - vision_intelligence_400_platform_firmware
  - wcd9306_firmware
  - wcd9335_firmware
  - wcd9340_firmware
  - wcd9341_firmware
  - wcd9360_firmware
  - wcd9370_firmware
  - wcd9371_firmware
  - wcd9375_firmware
  - wcd9378_firmware
  - wcd9380_firmware
  - wcd9385_firmware
  - wcd9390_firmware
  - wcd9395_firmware
  - wcn3910_firmware
  - wcn3950_firmware
  - wcn3980_firmware
  - wcn3988_firmware
  - wcn3990_firmware
  - wcn6650_firmware
  - wcn6755_firmware
  - wsa8810_firmware
  - wsa8815_firmware
  - wsa8830_firmware
  - wsa8832_firmware
  - wsa8835_firmware
  - wsa8840_firmware
  - wsa8845_firmware
  - ar8031_firmware
  - c-v2x_9150_firmware
  - csra6620_firmware
  - csra6640_firmware
  - csrb31024_firmware
  - fastconnect_6200_firmware
  - fastconnect_6700_firmware
  - fastconnect_6800_firmware
  - fastconnect_6900_firmware
  - fastconnect_7800_firmware
  - flight_rb5_5g_platform_firmware
  - fsm100_platform_firmware
  - g1_gen_1_firmware
  - g2_gen_1_firmware
  - g3x_gen_2_firmware
  - iq-615_firmware
  - iq-8275_firmware
  - iq-9075_firmware
  - iqx5121_firmware
  - iqx7181_firmware
  - mbm415_firmware
  - monaco_iot_firmware
  - netrani_firmware
  - qca0000_firmware
  - qca2066_firmware
  - qca4004_firmware
  - qca6391_firmware
  - qca6420_firmware
  - qca6430_firmware
  - qca6564_firmware
  - qca6564a_firmware
  - qca6564au_firmware
  - qca6574_firmware
  - qca6574a_firmware
  - qca6574au_firmware
  - qca6595_firmware
  - qca6595au_firmware
  - qca6688aq_firmware
  - qca6696_firmware
  - qca6698aq_firmware
  - wsa8845h_firmware
  - qca6698au_firmware
  - qca6797aq_firmware
  - qcc710_firmware
  - qcm2290_firmware
  - qcm4290_firmware
  - qcm4325_firmware
  - qcm4490_firmware
  - qcm5430_firmware
  - qcm6125_firmware
  - qcm6490_firmware
  - qcn9011_firmware
  - qcn9012_firmware
  - qcs2290_firmware
  - qcs4290_firmware
published: '2026-10-06'
updated: '2026-10-09'
sourceUpdated: '2026-10-09T14:10:14.323'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-25263'
references:
  - url: >-
      https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2026-bulletin.html
    label: product-security@qualcomm.com
tags:
  - nvd
  - cve.org
epss: 0.00057
epssPercentile: 0.00004
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-10-06T12:58:06.828429Z'
ingestedAt: '2026-10-06T07:49:23.037Z'
---

## Overview

Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.

## Affected

- `snapdragon_g1_gen_2_gaming_platform_firmware`
- `5g_fixed_wireless_access_platform_firmware`
- `9205_lte_modem_firmware`
- `9205s_modem_firmware`
- `aqt1000_firmware`
- `snapdragon_8c_compute_platform_(sc8180xp-ad)_firmware`
- `snapdragon_8cx_compute_platform_firmware`
- `snapdragon_8cx_compute_platform_"poipu_pro"_firmware`
- `snapdragon_8cx_gen_2_5g_compute_platform_firmware`
- `snapdragon_8cx_gen_2_5g_compute_platform_"poipu_pro"_firmware`
- `snapdragon_auto_5g_modem-rf_firmware`
- `snapdragon_wear_1300_platform_firmware`
- `snapdragon_x53_5g_modem-rf_system_firmware`
- `snapdragon_x55_5g_modem-rf_system_firmware`
- `snapdragon_xr2_5g_platform_firmware`
- `snapdragon_xr2+_gen_1_platform_firmware`
- `snapdragon_auto_4g_modem_firmware`
- `vision_intelligence_400_platform_firmware`
- `wcd9306_firmware`
- `wcd9335_firmware`
- `wcd9340_firmware`
- `wcd9341_firmware`
- `wcd9360_firmware`
- `wcd9370_firmware`
- `wcd9371_firmware`
- `wcd9375_firmware`
- `wcd9378_firmware`
- `wcd9380_firmware`
- `wcd9385_firmware`
- `wcd9390_firmware`
- `wcd9395_firmware`
- `wcn3910_firmware`
- `wcn3950_firmware`
- `wcn3980_firmware`
- `wcn3988_firmware`
- `wcn3990_firmware`
- `wcn6650_firmware`
- `wcn6755_firmware`
- `wsa8810_firmware`
- `wsa8815_firmware`
- `wsa8830_firmware`
- `wsa8832_firmware`
- `wsa8835_firmware`
- `wsa8840_firmware`
- `wsa8845_firmware`
- `ar8031_firmware`
- `c-v2x_9150_firmware`
- `csra6620_firmware`
- `csra6640_firmware`
- `csrb31024_firmware`
- `fastconnect_6200_firmware`
- `fastconnect_6700_firmware`
- `fastconnect_6800_firmware`
- `fastconnect_6900_firmware`
- `fastconnect_7800_firmware`
- `flight_rb5_5g_platform_firmware`
- `fsm100_platform_firmware`
- `g1_gen_1_firmware`
- `g2_gen_1_firmware`
- `g3x_gen_2_firmware`
- `iq-615_firmware`
- `iq-8275_firmware`
- `iq-9075_firmware`
- `iqx5121_firmware`
- `iqx7181_firmware`
- `mbm415_firmware`
- `monaco_iot_firmware`
- `netrani_firmware`
- `qca0000_firmware`
- `qca2066_firmware`
- `qca4004_firmware`
- `qca6391_firmware`
- `qca6420_firmware`
- `qca6430_firmware`
- `qca6564_firmware`
- `qca6564a_firmware`
- `qca6564au_firmware`
- `qca6574_firmware`
- `qca6574a_firmware`
- `qca6574au_firmware`
- `qca6595_firmware`
- `qca6595au_firmware`
- `qca6688aq_firmware`
- `qca6696_firmware`
- `qca6698aq_firmware`
- `wsa8845h_firmware`
- `qca6698au_firmware`
- `qca6797aq_firmware`
- `qcc710_firmware`
- `qcm2290_firmware`
- `qcm4290_firmware`
- `qcm4325_firmware`
- `qcm4490_firmware`
- `qcm5430_firmware`
- `qcm6125_firmware`
- `qcm6490_firmware`
- `qcn9011_firmware`
- `qcn9012_firmware`
- `qcs2290_firmware`
- `qcs4290_firmware`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.