CVE-2026-25276: Improper Validation of Array Index in Secure Processor
Published Jun 1, 2026
·Updated
Memory corruption while using Strongbox due to missing bounds check.
Affected Software
114 affected components
All of the following
Qualcomm Cq8750m Firmware
Qualcomm Cq8750m
All of the following
Qualcomm Fastconnect 6700 Firmware
Qualcomm Fastconnect 6700
All of the following
Qualcomm Fastconnect 6800 Firmware
Qualcomm Fastconnect 6800
All of the following
Qualcomm Fastconnect 6900 Firmware
Qualcomm Fastconnect 6900
All of the following
Qualcomm Fastconnect 7800 Firmware
Qualcomm Fastconnect 7800
All of the following
Qualcomm G3x Gen 2 Firmware
Qualcomm G3x Gen 2
All of the following
Qualcomm Pandeiro Firmware
Qualcomm Pandeiro
All of the following
Qualcomm Qca6391 Firmware
Qualcomm Qca6391
All of the following
Qualcomm Qca6698au Firmware
Qualcomm Qca6698au
All of the following
Qualcomm Qca6797aq Firmware
Qualcomm Qca6797aq
All of the following
Qualcomm Qcm5430 Firmware
Qualcomm Qcm5430
All of the following
Qualcomm Qcm6490 Firmware
Qualcomm Qcm6490
All of the following
Qualcomm Qcm8838 Firmware
Qualcomm Qcm8838
All of the following
Qualcomm Qcn9011 Firmware
Qualcomm Qcn9011
All of the following
Qualcomm Qcn9012 Firmware
Qualcomm Qcn9012
All of the following
Qualcomm Qcs8550 Firmware
Qualcomm Qcs8550
All of the following
Qualcomm Video Collaboration Vc3 Platform Firmware
Qualcomm Video Collaboration Vc3 Platform
All of the following
Qualcomm Sd865 5g Firmware
Qualcomm Sd865 5g
All of the following
Qualcomm Sdr753 Firmware
Qualcomm Sdr753
All of the following
Qualcomm Sm8550p Firmware
Qualcomm Sm8550p
All of the following
Qualcomm Sm8650q Firmware
Qualcomm Sm8650q
All of the following
Qualcomm Sm8750p Firmware
Qualcomm Sm8750p
All of the following
Qualcomm Snapdragon 460 Mobile Platform Firmware
Qualcomm Snapdragon 460 Mobile Platform
All of the following
Qualcomm Snapdragon 662 Mobile Platform Firmware
Qualcomm Snapdragon 662 Mobile Platform
All of the following
Qualcomm Snapdragon 8 Elite Firmware
Qualcomm Snapdragon 8 Elite
All of the following
Qualcomm Snapdragon 8 Elite Gen 5 Firmware
Qualcomm Snapdragon 8 Elite Gen 5
All of the following
Qualcomm Snapdragon 8 Gen 2 Mobile Platform Firmware
Qualcomm Snapdragon 8 Gen 2 Mobile Platform
All of the following
Qualcomm Snapdragon 8 Gen 3 Mobile Platform Firmware
Qualcomm Snapdragon 8 Gen 3 Mobile Platform
All of the following
Qualcomm Snapdragon 8\+ Gen 2 Mobile Platform Firmware
Qualcomm Snapdragon 8\+ Gen 2 Mobile Platform
All of the following
Qualcomm Snapdragon 865 5g Mobile Platform Firmware
Qualcomm Snapdragon 865 5g Mobile Platform
All of the following
Qualcomm Snapdragon 865\+ 5g Mobile Platform Firmware
Qualcomm Snapdragon 865\+ 5g Mobile Platform
All of the following
Qualcomm Snapdragon 870 5g Mobile Platform Firmware
Qualcomm Snapdragon 870 5g Mobile Platform
All of the following
Qualcomm Snapdragon Ar1 Gen 1 Platform Firmware
Qualcomm Snapdragon Ar1 Gen 1 Platform
All of the following
Qualcomm Snapdragon X55 5g Modem-rf System Firmware
Qualcomm Snapdragon X55 5g Modem-rf System
All of the following
Qualcomm Snapdragon Xr2 5g Platform Firmware
Qualcomm Snapdragon Xr2 5g Platform
All of the following
Qualcomm Snapdragon Xr2\+ Gen 1 Platform Firmware
Qualcomm Snapdragon Xr2\+ Gen 1 Platform
All of the following
Qualcomm Wcd9370 Firmware
Qualcomm Wcd9370
All of the following
Qualcomm Wcd9375 Firmware
Qualcomm Wcd9375
All of the following
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
All of the following
Qualcomm Wcd9385 Firmware
Qualcomm Wcd9385
All of the following
Qualcomm Wcd9390 Firmware
Qualcomm Wcd9390
All of the following
Qualcomm Wcd9395 Firmware
Qualcomm Wcd9395
All of the following
Qualcomm Wcn3950 Firmware
Qualcomm Wcn3950
All of the following
Qualcomm Wcn3988 Firmware
Qualcomm Wcn3988
All of the following
Qualcomm Wcn7760 Firmware
Qualcomm Wcn7760
All of the following
Qualcomm Wcn7860 Firmware
Qualcomm Wcn7860
All of the following
Qualcomm Wcn7861 Firmware
Qualcomm Wcn7861
All of the following
Qualcomm Wcn7880 Firmware
Qualcomm Wcn7880
All of the following
Qualcomm Wcn7881 Firmware
Qualcomm Wcn7881
All of the following
Qualcomm Wsa8810 Firmware
Qualcomm Wsa8810
All of the following
Qualcomm Wsa8815 Firmware
Qualcomm Wsa8815
All of the following
Qualcomm Wsa8830 Firmware
Qualcomm Wsa8830
All of the following
Qualcomm Wsa8832 Firmware
Qualcomm Wsa8832
All of the following
Qualcomm Wsa8835 Firmware
Qualcomm Wsa8835
All of the following
Qualcomm Wsa8840 Firmware
Qualcomm Wsa8840
All of the following
Qualcomm Wsa8845 Firmware
Qualcomm Wsa8845
All of the following
Qualcomm Wsa8845h Firmware
Qualcomm Wsa8845h
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Implement and enforce explicit bounds checks on all array index usages in the Secure Processor / Strongbox code path. Validate indices before use (reject or clamp out-of-range values) to prevent memory corruption caused by missing bounds checks.
Secure Processor (Strongbox) array_index_validation = enabled
Event History
Jun 1, 2026
CVE Published
via MITRE·10:05 PM
Data Sourced
via MITRE·10:05 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-25276?
CVE-2026-25276 has a high severity score of 8.8.
2
How do I fix CVE-2026-25276?
To fix CVE-2026-25276, ensure that you update to the latest firmware version provided by Qualcomm that addresses this vulnerability.
3
What affected software is involved in CVE-2026-25276?
CVE-2026-25276 affects multiple Qualcomm firmware versions, including Cq8750m, Fastconnect 6700, 6800, 6900, 7800, G3x Gen 2, Pandeiro, and Qca6391.
4
What type of vulnerability is CVE-2026-25276?
CVE-2026-25276 is classified as an out-of-bounds read vulnerability leading to memory corruption.
5
What is the potential impact of CVE-2026-25276?
The potential impact of CVE-2026-25276 includes memory corruption, which can lead to unauthorized access and security breaches.