Skip to content
OpenAdvisories
High · 7.1 CVE-2026-25302 EUVD-2026-92978GHSA-5mfp-688h-g4r8

Improper Verification of Cryptographic Signature in Boot

Published Oct 6, 2026 · Updated Oct 6, 2026 · Assigned by qualcomm

Description

Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon 5G Fixed Wireless Access Platform, AR8035, Cologne, CQ7790, CQ8725S, CQ8750M, CSRA6620, CSRA6640, FastConnect 6200, FastConnect 6700, FastConnect 6800, FastConnect 6900, FastConnect 7800, FWA Gen 3 Ultra Platform, FWA Gen 5 Elite Platform, G1 Gen 1, G2 Gen 1, G3x Gen 2, IPQ9048, IPQ9570, IPQ9574, I… —

Advisories 2

References