1. Home
  2. CVE Database
  3. CVE-2026-25292
HIGH · 7.6

CVE-2026-25292

Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration.

Vulnerability Description

Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration.

CVSS Score

7.6

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
QualcommSm6225P Firmware-
QualcommSm6225P-
QualcommSm6450P Firmware-
QualcommSm6450P-
QualcommSm6475P Firmware-
QualcommSm6475P-
QualcommSm6475Q Firmware-
QualcommSm6475Q-
QualcommSm6850 Firmware-
QualcommSm6850-
QualcommSm7435 Firmware-
QualcommSm7435-
QualcommSm7435P Firmware-
QualcommSm7435P-
QualcommSm7525 Firmware-
QualcommSm7525-
QualcommSm7550 Firmware-
QualcommSm7550-
QualcommSm7550P Firmware-
QualcommSm7550P-

Related Weaknesses (CWE)

CWE-1286

References

FAQ

What is CVE-2026-25292?

CVE-2026-25292 is a vulnerability with a CVSS score of 7.6 (HIGH). Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration.

How severe is CVE-2026-25292?

CVE-2026-25292 has been rated HIGH with a CVSS base score of 7.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-25292?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Sm6225P Firmware, Qualcomm Sm6225P, Qualcomm Sm6450P Firmware, Qualcomm Sm6450P, Qualcomm Sm6475P Firmware.