CVE-2026-25262: mdm9207 firmware Version not applicable in the source CPE; +8 more affected products

Affected technology

mdm9207 firmware · Version not applicable in the source CPE
qualcomm

mdm9655 firmware · Version not applicable in the source CPE
qualcomm

mdm9665 firmware · Version not applicable in the source CPE
qualcomm

msm8909 firmware · Version not applicable in the source CPE
qualcomm

msm8916 firmware · Version not applicable in the source CPE
qualcomm

msm8952 firmware · Version not applicable in the source CPE
qualcomm

sdx50 firmware · Version not applicable in the source CPE
qualcomm

mdm9645 firmware · Version not applicable in the source CPE
qualcomm

Snapdragon · MDM9x07, MDM9x45, MDM9x55, MDM9x65, MSM8909, MSM8916, MSM8952, SDX50
Qualcomm, Inc.

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Physical access · Low privileges required · User interaction required

Attack conditions (NVD, CVSS 3.1): Physical access · No privileges required · User interaction required

What an attacker can do

Vendor/CNA’s CVSS 3.1 assessment (base score 6.9/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 6.3/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.