Skip to content
OpenAdvisories
High · 7.6 CVE-2026-25292 EUVD-2026-52738GHSA-976j-gf8c-xp87

Improper Validation of Syntactic Correctness of Input in Automotive Linux OS

Published Aug 4, 2026 · Updated Aug 4, 2026 · Assigned by qualcomm

Description

Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon AR8035, CQ7790, CQ8725S, FastConnect 6200, FastConnect 6700, FastConnect 6900, FastConnect 7800, Flight RB5 5G Platform, FWA Gen 3 Ultra Platform, FWA Gen 5 Elite Platform, G1 Gen 1, G2 Gen 1, IQ10 Series, Kalpeni, Kobuk, LeMans_AU_LGIT, LeMansAU, Milos_IOT, Orne, Palawan25, Pandeiro, QAM8255P, QAM… —

References