CVE-2026-25289
Critical
Description
Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.
SeverityCritical
CVSS9.6
Exploit probability—
Product
Qualcomm Sm7550p Firmware
PublishedAug 4, 2026
First seenAug 4, 2026
Weakness typeCWE-121CWE-121
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qualcomm sm7550p_firmware | No range specified | — |
| qualcomm sm7635p_firmware | No range specified | — |
| qualcomm sm7675_firmware | No range specified | — |
| qualcomm sm7675p_firmware | No range specified | — |
| qualcomm sm8425_firmware | No range specified | — |
| qualcomm sm8550p_firmware | No range specified | — |
| qualcomm sm8635_firmware | No range specified | — |
| qualcomm sm8635p_firmware | No range specified | — |
| qualcomm sm8650q_firmware | No range specified | — |
| qualcomm sm8735p_firmware | No range specified | — |
| qualcomm sm8750p_firmware | No range specified | — |
| qualcomm sm8845p_firmware | No range specified | — |
| qualcomm snapdragon_6_gen_1_mobile_platform_firmware | No range specified | — |
| qualcomm snapdragon_6_gen_3_mobile_platform_firmware | No range specified | — |
| qualcomm snapdragon_6_gen_4_mobile_platform_firmware | No range specified | — |
| qualcomm snapdragon_7_gen_4_mobile_platform_firmware | No range specified | — |
| qualcomm snapdragon_7s_gen_3_mobile_platform_firmware | No range specified | — |
| qualcomm snapdragon_8_elite_firmware | No range specified | — |
| qualcomm snapdragon_8_elite_gen_5_firmware | No range specified | — |
| qualcomm snapdragon_8_gen_2_mobile_platform_firmware | No range specified | — |
| qualcomm snapdragon_8_gen_3_mobile_platform_firmware | No range specified | — |
| qualcomm snapdragon_8\+_gen_2_mobile_platform_firmware | No range specified | — |
| qualcomm snapdragon_ar1_gen_1_platform_firmware | No range specified | — |
| qualcomm snapdragon_ar1\+_gen_1_platform_firmware | No range specified | — |
| qualcomm snapdragon_auto_5g_modem-rf_gen_2_firmware | No range specified | — |
| qualcomm snapdragon_x65_5g_modem-rf_system_firmware | No range specified | — |
| qualcomm snapdragon_x72_5g_modem-rf_system_firmware | No range specified | — |
| qualcomm snapdragon_x75_5g_modem-rf_system_firmware | No range specified | — |
| qualcomm snapdragon_wear_elite_firmware | No range specified | — |
| qualcomm srv1h_firmware | No range specified | — |
| qualcomm srv1m_firmware | No range specified | — |
| qualcomm sxr2230p_firmware | No range specified | — |
| qualcomm sxr2250p_firmware | No range specified | — |
| qualcomm sxr2330p_firmware | No range specified | — |
| qualcomm sxr2350p_firmware | No range specified | — |
| qualcomm themisto_firmware | No range specified | — |
| qualcomm wcd9340_firmware | No range specified | — |
| qualcomm wcd9370_firmware | No range specified | — |
| qualcomm wcd9371_firmware | No range specified | — |
| qualcomm wcd9375_firmware | No range specified | — |
| qualcomm xrv9209_firmware | No range specified | — |
| qualcomm ar8035_firmware | No range specified | — |
| qualcomm cologne_firmware | No range specified | — |
| qualcomm cq7790_firmware | No range specified | — |
| qualcomm cq8725s_firmware | No range specified | — |
| qualcomm cq8750m_firmware | No range specified | — |
| qualcomm fastconnect_6200_firmware | No range specified | — |
| qualcomm fastconnect_6700_firmware | No range specified | — |
| qualcomm fastconnect_6900_firmware | No range specified | — |
| qualcomm fastconnect_7800_firmware | No range specified | — |
| qualcomm fwa_gen_3_ultra_firmware | No range specified | — |
| qualcomm fwa_gen_5_elite_firmware | No range specified | — |
| qualcomm g2_gen_1_firmware | No range specified | — |
| qualcomm g3x_gen_2_firmware | No range specified | — |
| qualcomm immersive_home_3210_platform_firmware | No range specified | — |
| qualcomm immersive_home_326_platform_firmware | No range specified | — |
| qualcomm ipq5300_firmware | No range specified | — |
| qualcomm ipq5302_firmware | No range specified | — |
| qualcomm ipq5312_firmware | No range specified | — |
| qualcomm ipq5332_firmware | No range specified | — |
| qualcomm ipq9008_firmware | No range specified | — |
| qualcomm ipq9554_firmware | No range specified | — |
| qualcomm ipq9570_firmware | No range specified | — |
| qualcomm ipq9574_firmware | No range specified | — |
| qualcomm iqx5121_firmware | No range specified | — |
| qualcomm iqx7181_firmware | No range specified | — |
| qualcomm kobuk_firmware | No range specified | — |
| qualcomm lemans_au_lgit_firmware | No range specified | — |
| qualcomm lemansau_firmware | No range specified | — |
| qualcomm milos_firmware | No range specified | — |
| qualcomm milos_iot_firmware | No range specified | — |
| qualcomm molokai_firmware | No range specified | — |
| qualcomm netrani_firmware | No range specified | — |
| qualcomm networking_pro_1210_firmware | No range specified | — |
| qualcomm networking_pro_1610_firmware | No range specified | — |
| qualcomm networking_pro_610_firmware | No range specified | — |
| qualcomm networking_pro_810_firmware | No range specified | — |
| qualcomm orne_firmware | No range specified | — |
| qualcomm palawan25_firmware | No range specified | — |
| qualcomm pandeiro_firmware | No range specified | — |
| qualcomm qam8255p_firmware | No range specified | — |
| qualcomm qam8397p_firmware | No range specified | — |
| qualcomm qam8797p_firmware | No range specified | — |
| qualcomm qamsrv1h_firmware | No range specified | — |
| qualcomm qamsrv1m_firmware | No range specified | — |
| qualcomm wcd9378_firmware | No range specified | — |
| qualcomm wcd9378c_firmware | No range specified | — |
| qualcomm wcd9380_firmware | No range specified | — |
| qualcomm wcd9385_firmware | No range specified | — |
| qualcomm wcd9390_firmware | No range specified | — |
| qualcomm wcd9395_firmware | No range specified | — |
| qualcomm wcn3988_firmware | No range specified | — |
| qualcomm wcn6450_firmware | No range specified | — |
| qualcomm wcn6650_firmware | No range specified | — |
| qualcomm wcn6755_firmware | No range specified | — |
| qualcomm wcn7760_firmware | No range specified | — |
| qualcomm wcn7860_firmware | No range specified | — |
| qualcomm wcn7861_firmware | No range specified | — |
| qualcomm wcn7880_firmware | No range specified | — |
| qualcomm wcn7881_firmware | No range specified | — |
| qualcomm wsa8810_firmware | No range specified | — |
| qualcomm wsa8815_firmware | No range specified | — |
| qualcomm wsa8830_firmware | No range specified | — |
| qualcomm wsa8832_firmware | No range specified | — |
| qualcomm wsa8835_firmware | No range specified | — |
| qualcomm wsa8840_firmware | No range specified | — |
| qualcomm wsa8845_firmware | No range specified | — |
| qualcomm wsa8845h_firmware | No range specified | — |
| qualcomm wsa8850_firmware | No range specified | — |
| qualcomm wsa8850w_firmware | No range specified | — |
| qualcomm wsa8855c_firmware | No range specified | — |
| qualcomm x1e80100_firmware | No range specified | — |
| qualcomm x2000077_firmware | No range specified | — |
| qualcomm x2000086_firmware | No range specified | — |
| qualcomm x2000090_firmware | No range specified | — |
| qualcomm x2000092_firmware | No range specified | — |
| qualcomm x2000094_firmware | No range specified | — |
| qualcomm xg101002_firmware | No range specified | — |
| qualcomm xg101032_firmware | No range specified | — |
| qualcomm xg101039_firmware | No range specified | — |
| qualcomm xrv7209_firmware | No range specified | — |
| qualcomm qca0000_firmware | No range specified | — |
| qualcomm qca6391_firmware | No range specified | — |
| qualcomm qca6554a_firmware | No range specified | — |
| qualcomm qca6564au_firmware | No range specified | — |
| qualcomm qca6574_firmware | No range specified | — |
| qualcomm qca6574a_firmware | No range specified | — |
| qualcomm qca6574au_firmware | No range specified | — |
| qualcomm qca6584au_firmware | No range specified | — |
| qualcomm qca6595_firmware | No range specified | — |
| qualcomm qca6595au_firmware | No range specified | — |
| qualcomm qca6678aq_firmware | No range specified | — |
| qualcomm qca6688aq_firmware | No range specified | — |
| qualcomm qca6696_firmware | No range specified | — |
| qualcomm qca6698aq_firmware | No range specified | — |
| qualcomm qca6698au_firmware | No range specified | — |
| qualcomm qca6777aq_firmware | No range specified | — |
| qualcomm qca6787aq_firmware | No range specified | — |
| qualcomm qca6797aq_firmware | No range specified | — |
| qualcomm qca8075_firmware | No range specified | — |
| qualcomm qca8081_firmware | No range specified | — |
| qualcomm qca8082_firmware | No range specified | — |
| qualcomm qca8084_firmware | No range specified | — |
| qualcomm qca8085_firmware | No range specified | — |
| qualcomm qca8337_firmware | No range specified | — |
| qualcomm qca8386_firmware | No range specified | — |
| qualcomm qca8695au_firmware | No range specified | — |
| qualcomm qcc2073_firmware | No range specified | — |
| qualcomm qcc2076_firmware | No range specified | — |
| qualcomm qcc710_firmware | No range specified | — |
| qualcomm qcf8000_firmware | No range specified | — |
| qualcomm qcf8001_firmware | No range specified | — |
| qualcomm qcn5124_firmware | No range specified | — |
| qualcomm qcn6224_firmware | No range specified | — |
| qualcomm qcn6274_firmware | No range specified | — |
| qualcomm qcn6402_firmware | No range specified | — |
| qualcomm qcn6412_firmware | No range specified | — |
| qualcomm qcn6422_firmware | No range specified | — |
| qualcomm qcn6432_firmware | No range specified | — |
| qualcomm qcn9000_firmware | No range specified | — |
| qualcomm qcn9011_firmware | No range specified | — |
| qualcomm qcn9012_firmware | No range specified | — |
| qualcomm qcn9024_firmware | No range specified | — |
| qualcomm qcn9274_firmware | No range specified | — |
| qualcomm qcs6690_firmware | No range specified | — |
| qualcomm qfw7114_firmware | No range specified | — |
| qualcomm qfw7124_firmware | No range specified | — |
| qualcomm qln1083bd_firmware | No range specified | — |
| qualcomm qln1086bd_firmware | No range specified | — |
| qualcomm qmb715_firmware | No range specified | — |
| qualcomm qmp1000_firmware | No range specified | — |
| qualcomm qmp2001_firmware | No range specified | — |
| qualcomm qpa1083bd_firmware | No range specified | — |
| qualcomm qpa1086bd_firmware | No range specified | — |
| qualcomm qxm1083_firmware | No range specified | — |
| qualcomm qxm1086_firmware | No range specified | — |
| qualcomm qxm1093_firmware | No range specified | — |
| qualcomm qxm1094_firmware | No range specified | — |
| qualcomm qxm1095_firmware | No range specified | — |
| qualcomm qxm1096_firmware | No range specified | — |
| qualcomm sa7255p_firmware | No range specified | — |
| qualcomm sa7775p_firmware | No range specified | — |
| qualcomm sa8255p_firmware | No range specified | — |
| qualcomm sa8620p_firmware | No range specified | — |
| qualcomm sa8770p_firmware | No range specified | — |
| qualcomm sa9000p_firmware | No range specified | — |
| qualcomm sar1165p_firmware | No range specified | — |
| qualcomm sar2130p_firmware | No range specified | — |
| qualcomm sc8380xp_firmware | No range specified | — |
| qualcomm sdx65m_firmware | No range specified | — |
| qualcomm sdx81_firmware | No range specified | — |
| qualcomm sm6450p_firmware | No range specified | — |
| qualcomm sm6475p_firmware | No range specified | — |
| qualcomm sm6475q_firmware | No range specified | — |
| qualcomm sm6650p_firmware | No range specified | — |
| qualcomm sm6850_firmware | No range specified | — |
| qualcomm sm7425_firmware | No range specified | — |
| qualcomm sm7435_firmware | No range specified | — |
| qualcomm sm7435p_firmware | No range specified | — |
| qualcomm sm7525_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.