1. Home
  2. CVE Database
  3. CVE-2026-25289
CRITICAL · 9.6

CVE-2026-25289

Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.

Vulnerability Description

Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.

CVSS Score

9.6

CRITICAL

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
QualcommSm7550P Firmware-
QualcommSm7550P-
QualcommSm7635P Firmware-
QualcommSm7635P-
QualcommSm7675 Firmware-
QualcommSm7675-
QualcommSm7675P Firmware-
QualcommSm7675P-
QualcommSm8425 Firmware-
QualcommSm8425-
QualcommSm8550P Firmware-
QualcommSm8550P-
QualcommSm8635 Firmware-
QualcommSm8635-
QualcommSm8635P Firmware-
QualcommSm8635P-
QualcommSm8650Q Firmware-
QualcommSm8650Q-
QualcommSm8735P Firmware-
QualcommSm8735P-

Related Weaknesses (CWE)

CWE-121

References

FAQ

What is CVE-2026-25289?

CVE-2026-25289 is a vulnerability with a CVSS score of 9.6 (CRITICAL). Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.

How severe is CVE-2026-25289?

CVE-2026-25289 has been rated CRITICAL with a CVSS base score of 9.6/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2026-25289?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Sm7550P Firmware, Qualcomm Sm7550P, Qualcomm Sm7635P Firmware, Qualcomm Sm7635P, Qualcomm Sm7675 Firmware.