{"id":"CVE-2026-25292","published":"2026-08-04T16:16:25.183","lastModified":"2026-08-06T18:35:21.163","description":"Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration.","cvssScore":7.6,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-1286"],"vendors":["qualcomm"],"products":["sm6225p firmware","sm6225p","sm6450p firmware","sm6450p","sm6475p firmware","sm6475p","sm6475q firmware","sm6475q","sm6850 firmware","sm6850","sm7435 firmware","sm7435"],"references":[{"url":"https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-bulletin.html","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A memory corruption vulnerability exists in Qualcomm's fastboot command handler for audio framework configuration when processing untrusted user input, potentially allowing attackers to execute arbitrary code with high privileges.","exploitability":"Exploitation requires local access to a device running affected firmware versions and likely involves crafting specific audio configuration data during fastboot operations, making it moderately difficult but feasible for attackers with physical or remote access.","blast_radius":"If exploited, this vulnerability could compromise multiple Qualcomm-based devices including smartphones and tablets that use the affected SM6225P, SM6450P, SM6475P, or SM6475Q chipsets, potentially leading to full device takeover and persistent backdoor access.","remediation":"Upgrade to firmware version 2.590 or later for all affected devices running SM6225P, SM6450P, SM6475P, or SM6475Q chipsets.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["memory-corruption","firmware","qualcomm","rce"],"model":"garnet-coder","analyzedAt":"2026-10-12T08:56:40.003Z"}}