P4Verified

CVE-2026-25270: Snapdragon FastConnect 6700, FastConnect 6900, FastConnect 7800, Kalpeni, QCM6490, Qualcomm Dragonwing QCM4490…

CVE-2026-25270. CVSS 3.1 base score 6.7 (ghsa).

Affected technology

Snapdragon · FastConnect 6700, FastConnect 6900, FastConnect 7800, Kalpeni, QCM6490, Qualcomm Dragonwing QCM4490, Qualcomm Video Collaboration VC3 Platform, SD865 5G, Snapdragon 8 Gen 1 Mobile Platform, Snapdragon XR2 5G Platform, Snapdragon XR2+ Gen 1 Platform, SW5100, SW5100P, SXR2230P, SXR2250P, WCD9370, WCD9375, WCD9378, WCD9380, WCD9385, WCN3950, WCN3980, WCN3988, WSA8810, WSA8815, WSA8830, WSA8832, WSA8835, WSA8840, WSA8845, WSA8845H, X1E80100
Qualcomm, Inc.

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Local · High privileges required · No user interaction required

What an attacker can do

Vendor/CNA’s CVSS 3.1 assessment (base score 6.7/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 2026-10-06 07:32:49.402105+00:00

CWE: CWE-787
CCR priority: 26.8 /100 (P4)
CVSS 3.1: 6.7 /10 · CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · Vendor/CNA
KEV: no

Provenance

GitHub Advisory Database · Source record · observed 2026-10-06 10:41:36.128766+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-06 17:55:17.257073+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-25270.html