CVE-2026-25278NVD

Vulnerability Summary

Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying.

Severity Level

HIGH(7.8)

Published Date

Sep 17, 2026

Last Modified

Sep 22, 2026

Exploitation Status

No confirmed exploitation yet

EPSS Score (30-Day)

0.09%Probability

Root Weakness (CWE)

CWE-367: Unknown/Unlisted Weakness ↗

Refer to the official MITRE database for detailed architectural specifications regarding this weakness.

CVSS v3.1 Base Metrics — Score 7.8 (HIGH)

Attack VectorLocal

Attack ComplexityLow

Privileges RequiredLow

User InteractionNone

ScopeUnchanged

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

Affected & Patched Versions

Affected Versions

Qualcomm Lemans Au Lgit Firmware
Qualcomm Lemansau Firmware
Qualcomm Qam8255p Firmware
Qualcomm Qam8295p Firmware
Qualcomm Qam8620p Firmware
Qualcomm Qamsrv1h Firmware
Qualcomm Qamsrv1m Firmware
Qualcomm Qca6574au Firmware
Qualcomm Qca6595 Firmware
Qualcomm Qca6595au Firmware
Qualcomm Qca6688aq Firmware
Qualcomm Qca6696 Firmware
Qualcomm Qca6698aq Firmware
Qualcomm Qca6797aq Firmware
Qualcomm Qca8695au Firmware
Qualcomm Sa6155p Firmware
Qualcomm Sa7255p Firmware
Qualcomm Sa7775p Firmware
Qualcomm Sa8155p Firmware
Qualcomm Sa8195p Firmware
Qualcomm Sa8255p Firmware
Qualcomm Sa8295p Firmware
Qualcomm Sa8540p Firmware
Qualcomm Sa8620p Firmware
Qualcomm Sa8770p Firmware
Qualcomm Sa9000p Firmware
Qualcomm Srv1h Firmware
Qualcomm Srv1l Firmware
Qualcomm Srv1m Firmware

Patched Versions

Not provided by NVD for this CVE.

📧Email Delivery — Threat intel straight to your inbox.

♾️Unlimited Vendors — Track your entire stack.

🚨All New CVEs — Be the first to know.

⚙️Custom EPSS — Filter noise, focus on risk.

💬Webhooks — Slack & Teams integration.

🚫Ad-Free — Uninterrupted experience.