QualcommCVE-2026-25284

Qualcomm Snapdragon: information disclosure

High7.3CVE-2026-25284 · Published Sep 17, 2026 · updated Sep 22, 2026

Information Disclosure when a pointer is reused after being deallocated.

Qualcomm advisory

Affected versions

Package	Affected	Fixed in
Snapdragon Product	<= Cologne	No fix yet
	<= FastConnect 7800	No fix yet
	<= Snapdragon X2 Elite	No fix yet
	<= WCD9378C	No fix yet

Details and references

CVSS 3.1: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L
Severity from: the vendor (its own CVE record or advisory)
Weakness: CWE-126

More Qualcomm advisories

Date	Advisory	Severity	Fixed in
Sep 17	Qualcomm Snapdragon: resource exhaustion High7.4Sep 17 CVE-2026-25281No fix yet	High7.4	No fix yet
Sep 17	Qualcomm Snapdragon: out-of-bounds read High7.9Sep 17 CVE-2026-25282No fix yet	High7.9	No fix yet
Sep 17	Qualcomm Snapdragon: memory corruption High8.8Sep 17 CVE-2026-25283No fix yet	High8.8	No fix yet
Sep 17	Qualcomm Snapdragon: memory corruption High7.8Sep 17 CVE-2026-25290No fix yet	High7.8	No fix yet
Sep 17	Transient DOS while parsing frame during channel usage High7.4Sep 17 CVE-2026-25294No fix yet	High7.4	No fix yet
Sep 17	Qualcomm Snapdragon: memory corruption High7.8Sep 17 CVE-2026-24075No fix yet	High7.8	No fix yet

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.