Memory Corruption in QCOM Fastboot Audio Framework
CVE-2026-25292 Published on August 4, 2026

Improper Validation of Syntactic Correctness of Input in Automotive Linux OS
Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration.

NVD

Vulnerability Analysis

CVE-2026-25292 is exploitable with physical access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.

Attack Vector:
PHYSICAL
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE
Scope:
CHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH

Weakness Type

Improper Validation of Syntactic Correctness of Input

The product receives input that is expected to be well-formed - i.e., to comply with a certain syntax - but it does not validate or incorrectly validates that the input complies with the syntax.


Products Associated with CVE-2026-25292

Want to know whenever a new CVE is published for Qualcomm Snapdragon? stack.watch will email you.

 

Affected Versions

Qualcomm, Inc. Snapdragon: