Is CVE-2026-25268 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-25268 being exploited in the wild.

How severe is CVE-2026-25268?

High severity, with a CVSS score of 8.8, published 6 July 2026.

Which products and versions are affected?

Qualcomm Snapdragon Multiple platforms including Snapdragon Auto, Compute, Mobile, and FastConnect (see advisory for full list).

Is there a fix for CVE-2026-25268?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-25268 attacked?

It is attacked with local access, in device firmware.

Am I affected by CVE-2026-25268?

Check whether you run Qualcomm FastConnect, Qualcomm Snapdragon Auto, Qualcomm Snapdragon Compute or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-25268: Qualcomm Snapdragon memory corruption in HT40 channel switching

CVE-2026-25268 · Severity: high · CVSS 8.8 · Published 2026-07-06

A security vulnerability exists in various Qualcomm Snapdragon chipsets used in mobile devices, automotive systems, and networking hardware. The flaw occurs when the device handles specific Wi-Fi channel switching operations, which could allow a malicious actor with local access to corrupt the system's memory. If exploited, this could lead to a complete system takeover, unauthorized data access, or permanent device instability.

Technologies: Qualcomm Snapdragon Auto, Qualcomm Snapdragon Compute, Qualcomm Snapdragon Mobile. Vendors: Qualcomm.

Quick answers

Is CVE-2026-25268 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-25268 being exploited in the wild.
How severe is CVE-2026-25268?: High severity, with a CVSS score of 8.8, published 6 July 2026.
Which products and versions are affected?: Qualcomm Snapdragon Multiple platforms including Snapdragon Auto, Compute, Mobile, and FastConnect (see advisory for full list).
Is there a fix for CVE-2026-25268?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-25268 attacked?: It is attacked with local access, in device firmware.
Am I affected by CVE-2026-25268?: Check whether you run Qualcomm FastConnect, Qualcomm Snapdragon Auto, Qualcomm Snapdragon Compute or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A stack-based buffer overflow (CWE-121) exists in Qualcomm Snapdragon firmware during the processing of HT40 (High Throughput 40MHz) channel layouts. The vulnerability is triggered during dynamic channel switching operations when the system encounters an invalid layout configuration. An attacker with local low-privileged access can exploit this to cause memory corruption. Given the 'Changed' scope (S:C) in the CVSS vector, this vulnerability may allow an attacker to escape a restricted environment or impact the underlying secure processor/hypervisor, potentially leading to full system compromise (Confidentiality, Integrity, and Availability). Patch information is typically available through the July 2026 Qualcomm Security Bulletin.

Affected products

Qualcomm Snapdragon Multiple platforms including Snapdragon Auto, Compute, Mobile, and FastConnect (see advisory for full list)

Timeline

2026-07-06: advisory: Published by Qualcomm and NVD

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2026-bulletin.html

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.