---
id: CVE-2026-25302
title: >-
  Cryptographic Issue when processing non-ELF partitions, authentication and
  signature checks are bypassed, allowing unsigned or corrupted images to be
  mounted and processed.
summary: >-
  Cryptographic Issue when processing non-ELF partitions, authentication and
  signature checks are bypassed, allowing unsigned or corrupted images to be
  mounted and processed.
severity: high
cvss: 7.1
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H'
cwe:
  - CWE-347
vendor: qualcomm
product: xrv9209_firmware
affected:
  - xrv9209_firmware
  - snapdragon_g1_gen_2_gaming_platform_firmware
  - ar8035_firmware
  - cologne_firmware
  - cq2390m_firmware
  - qmp2001_firmware
  - qmx82l_firmware
  - qmx85l_firmware
  - qna715_firmware
  - qpa1083bd_firmware
  - qpa1086bd_firmware
  - qru1032_firmware
  - qualcomm_dragonwing_qru100_platform_firmware
  - qualcomm_dragonwing_x100_accelerator_card_firmware
  - video_collaboration_vc3_platform_firmware
  - video_collaboration_vc5_platform_firmware
  - qxm1083_firmware
  - qxm1086_firmware
  - qxm1093_firmware
  - qxm1094_firmware
  - qxm1095_firmware
  - qxm1096_firmware
  - robotics_rb2_platform_firmware
  - robotics_rb5_platform_firmware
  - sa510m_firmware
  - sa7255p_firmware
  - sa7775p_firmware
  - sa8255p_firmware
  - sa8295p_firmware
  - sa8540p_firmware
  - sa8620p_firmware
  - sa8770p_firmware
  - sa9000p_firmware
  - sar1165p_firmware
  - sar2130p_firmware
  - sc8380xp_firmware
  - snapdragon_8_gen1_5g_firmware
  - snapdragon_662_mobile_platform_firmware
  - snapdragon_865_5g_mobile_platform_firmware
  - sdr753_firmware
  - sdx61_firmware
  - sdx71m_firmware
  - sdx81_firmware
  - sm4850_firmware
  - sm4850p_firmware
  - wsa8845_firmware
  - wsa8845h_firmware
  - wsa8850_firmware
  - wsa8850w_firmware
  - wsa8855c_firmware
  - x1e80100_firmware
  - xrv7209_firmware
  - cq2390s_firmware
  - cq7790_firmware
  - cq7790m_firmware
  - cq8725s_firmware
  - cq8750m_firmware
  - cq8845s_firmware
  - cq8850ns_firmware
  - csra6620_firmware
  - csra6640_firmware
  - fastconnect_6200_firmware
  - fastconnect_6700_firmware
  - fastconnect_6800_firmware
  - fastconnect_6900_firmware
  - fastconnect_7800_firmware
  - flight_rb5_5g_platform_firmware
  - fsm200_platform_firmware
  - fsm20055_firmware
  - fwa_gen_3_ultra_firmware
  - fwa_gen_5_elite_firmware
  - g1_gen_1_firmware
  - g2_gen_1_firmware
  - g3x_gen_2_firmware
  - ipq9048_firmware
  - ipq9570_firmware
  - ipq9574_firmware
  - iq10_series_firmware
  - iq-615_firmware
  - iq-8275_firmware
  - iq-9075_firmware
  - iqx5121_firmware
  - iqx7181_firmware
  - kalpeni_firmware
  - kobuk_firmware
  - lemans_au_lgit_firmware
  - lemansau_firmware
  - marina_firmware
  - mbm415_firmware
  - mbm715_firmware
  - milos_firmware
  - milos_iot_firmware
  - sm4875_firmware
  - sm6225p_firmware
  - sm6450p_firmware
  - sm6475p_firmware
  - sm6475q_firmware
  - sm6650p_firmware
  - sm6850_firmware
  - sm7325p_firmware
published: '2026-10-06'
updated: '2026-10-09'
sourceUpdated: '2026-10-09T14:11:52.460'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-25302'
references:
  - url: >-
      https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2026-bulletin.html
    label: product-security@qualcomm.com
tags:
  - nvd
  - cve.org
epss: 0.00063
epssPercentile: 0.0001
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-06T12:08:31.949796Z'
ingestedAt: '2026-10-06T07:49:23.041Z'
---

## Overview

Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.

## Affected

- `xrv9209_firmware`
- `snapdragon_g1_gen_2_gaming_platform_firmware`
- `ar8035_firmware`
- `cologne_firmware`
- `cq2390m_firmware`
- `qmp2001_firmware`
- `qmx82l_firmware`
- `qmx85l_firmware`
- `qna715_firmware`
- `qpa1083bd_firmware`
- `qpa1086bd_firmware`
- `qru1032_firmware`
- `qualcomm_dragonwing_qru100_platform_firmware`
- `qualcomm_dragonwing_x100_accelerator_card_firmware`
- `video_collaboration_vc3_platform_firmware`
- `video_collaboration_vc5_platform_firmware`
- `qxm1083_firmware`
- `qxm1086_firmware`
- `qxm1093_firmware`
- `qxm1094_firmware`
- `qxm1095_firmware`
- `qxm1096_firmware`
- `robotics_rb2_platform_firmware`
- `robotics_rb5_platform_firmware`
- `sa510m_firmware`
- `sa7255p_firmware`
- `sa7775p_firmware`
- `sa8255p_firmware`
- `sa8295p_firmware`
- `sa8540p_firmware`
- `sa8620p_firmware`
- `sa8770p_firmware`
- `sa9000p_firmware`
- `sar1165p_firmware`
- `sar2130p_firmware`
- `sc8380xp_firmware`
- `snapdragon_8_gen1_5g_firmware`
- `snapdragon_662_mobile_platform_firmware`
- `snapdragon_865_5g_mobile_platform_firmware`
- `sdr753_firmware`
- `sdx61_firmware`
- `sdx71m_firmware`
- `sdx81_firmware`
- `sm4850_firmware`
- `sm4850p_firmware`
- `wsa8845_firmware`
- `wsa8845h_firmware`
- `wsa8850_firmware`
- `wsa8850w_firmware`
- `wsa8855c_firmware`
- `x1e80100_firmware`
- `xrv7209_firmware`
- `cq2390s_firmware`
- `cq7790_firmware`
- `cq7790m_firmware`
- `cq8725s_firmware`
- `cq8750m_firmware`
- `cq8845s_firmware`
- `cq8850ns_firmware`
- `csra6620_firmware`
- `csra6640_firmware`
- `fastconnect_6200_firmware`
- `fastconnect_6700_firmware`
- `fastconnect_6800_firmware`
- `fastconnect_6900_firmware`
- `fastconnect_7800_firmware`
- `flight_rb5_5g_platform_firmware`
- `fsm200_platform_firmware`
- `fsm20055_firmware`
- `fwa_gen_3_ultra_firmware`
- `fwa_gen_5_elite_firmware`
- `g1_gen_1_firmware`
- `g2_gen_1_firmware`
- `g3x_gen_2_firmware`
- `ipq9048_firmware`
- `ipq9570_firmware`
- `ipq9574_firmware`
- `iq10_series_firmware`
- `iq-615_firmware`
- `iq-8275_firmware`
- `iq-9075_firmware`
- `iqx5121_firmware`
- `iqx7181_firmware`
- `kalpeni_firmware`
- `kobuk_firmware`
- `lemans_au_lgit_firmware`
- `lemansau_firmware`
- `marina_firmware`
- `mbm415_firmware`
- `mbm715_firmware`
- `milos_firmware`
- `milos_iot_firmware`
- `sm4875_firmware`
- `sm6225p_firmware`
- `sm6450p_firmware`
- `sm6475p_firmware`
- `sm6475q_firmware`
- `sm6650p_firmware`
- `sm6850_firmware`
- `sm7325p_firmware`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.