Skip to content
OpenAdvisories
High · 7.8 CVE-2026-25278 EUVD-2026-81326GHSA-2mj3-25xq-r4px

Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive Software platform based on QNX

Published Sep 17, 2026 · Updated Sep 17, 2026 · Assigned by qualcomm

Vendor: Qualcomm Product: Snapdragon

Description

Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon LeMans_AU_LGIT, LeMansAU, QAM8255P, QAM8295P, QAM8620P, QAMSRV1H, QAMSRV1M, QCA6574AU, QCA6595, QCA6595AU, QCA6688AQ, QCA6696, QCA6698AQ, QCA6797AQ, QCA8695AU, SA6155P, SA7255P, SA7775P, SA8155P, SA8195P, SA8255P, SA8295P, SA8540P, SA8620P, SA8770P, SA9000P, SRV1H, SRV1L, SRV1M —

References