CVE-2026-25277: Buffer Copy Without Checking Size of Input in Secure Processor
Published Jun 1, 2026
·Updated
Memory corruption while using Strongbox due to buffer overflow.
Affected Software
114 affected components
All of the following
Qualcomm Cq8750m Firmware
Qualcomm Cq8750m
All of the following
Qualcomm Fastconnect 6700 Firmware
Qualcomm Fastconnect 6700
All of the following
Qualcomm Fastconnect 6800 Firmware
Qualcomm Fastconnect 6800
All of the following
Qualcomm Fastconnect 6900 Firmware
Qualcomm Fastconnect 6900
All of the following
Qualcomm Fastconnect 7800 Firmware
Qualcomm Fastconnect 7800
All of the following
Qualcomm G3x Gen 2 Firmware
Qualcomm G3x Gen 2
All of the following
Qualcomm Pandeiro Firmware
Qualcomm Pandeiro
All of the following
Qualcomm Qca6391 Firmware
Qualcomm Qca6391
All of the following
Qualcomm Qca6698au Firmware
Qualcomm Qca6698au
All of the following
Qualcomm Qca6797aq Firmware
Qualcomm Qca6797aq
All of the following
Qualcomm Qcm5430 Firmware
Qualcomm Qcm5430
All of the following
Qualcomm Qcm6490 Firmware
Qualcomm Qcm6490
All of the following
Qualcomm Qcm8838 Firmware
Qualcomm Qcm8838
All of the following
Qualcomm Qcn9011 Firmware
Qualcomm Qcn9011
All of the following
Qualcomm Qcn9012 Firmware
Qualcomm Qcn9012
All of the following
Qualcomm Qcs8550 Firmware
Qualcomm Qcs8550
All of the following
Qualcomm Video Collaboration Vc3 Platform Firmware
Qualcomm Video Collaboration Vc3 Platform
All of the following
Qualcomm Sd865 5g Firmware
Qualcomm Sd865 5g
All of the following
Qualcomm Sdr753 Firmware
Qualcomm Sdr753
All of the following
Qualcomm Sm8550p Firmware
Qualcomm Sm8550p
All of the following
Qualcomm Sm8650q Firmware
Qualcomm Sm8650q
All of the following
Qualcomm Sm8750p Firmware
Qualcomm Sm8750p
All of the following
Qualcomm Snapdragon 460 Mobile Platform Firmware
Qualcomm Snapdragon 460 Mobile Platform
All of the following
Qualcomm Snapdragon 662 Mobile Platform Firmware
Qualcomm Snapdragon 662 Mobile Platform
All of the following
Qualcomm Snapdragon 8 Elite Firmware
Qualcomm Snapdragon 8 Elite
All of the following
Qualcomm Snapdragon 8 Elite Gen 5 Firmware
Qualcomm Snapdragon 8 Elite Gen 5
All of the following
Qualcomm Snapdragon 8 Gen 2 Mobile Platform Firmware
Qualcomm Snapdragon 8 Gen 2 Mobile Platform
All of the following
Qualcomm Snapdragon 8 Gen 3 Mobile Platform Firmware
Qualcomm Snapdragon 8 Gen 3 Mobile Platform
All of the following
Qualcomm Snapdragon 8\+ Gen 2 Mobile Platform Firmware
Qualcomm Snapdragon 8\+ Gen 2 Mobile Platform
All of the following
Qualcomm Snapdragon 865 5g Mobile Platform Firmware
Qualcomm Snapdragon 865 5g Mobile Platform
All of the following
Qualcomm Snapdragon 865\+ 5g Mobile Platform Firmware
Qualcomm Snapdragon 865\+ 5g Mobile Platform
All of the following
Qualcomm Snapdragon 870 5g Mobile Platform Firmware
Qualcomm Snapdragon 870 5g Mobile Platform
All of the following
Qualcomm Snapdragon Ar1 Gen 1 Platform Firmware
Qualcomm Snapdragon Ar1 Gen 1 Platform
All of the following
Qualcomm Snapdragon X55 5g Modem-rf System Firmware
Qualcomm Snapdragon X55 5g Modem-rf System
All of the following
Qualcomm Snapdragon Xr2 5g Platform Firmware
Qualcomm Snapdragon Xr2 5g Platform
All of the following
Qualcomm Snapdragon Xr2\+ Gen 1 Platform Firmware
Qualcomm Snapdragon Xr2\+ Gen 1 Platform
All of the following
Qualcomm Wcd9370 Firmware
Qualcomm Wcd9370
All of the following
Qualcomm Wcd9375 Firmware
Qualcomm Wcd9375
All of the following
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
All of the following
Qualcomm Wcd9385 Firmware
Qualcomm Wcd9385
All of the following
Qualcomm Wcd9390 Firmware
Qualcomm Wcd9390
All of the following
Qualcomm Wcd9395 Firmware
Qualcomm Wcd9395
All of the following
Qualcomm Wcn3950 Firmware
Qualcomm Wcn3950
All of the following
Qualcomm Wcn3988 Firmware
Qualcomm Wcn3988
All of the following
Qualcomm Wcn7760 Firmware
Qualcomm Wcn7760
All of the following
Qualcomm Wcn7860 Firmware
Qualcomm Wcn7860
All of the following
Qualcomm Wcn7861 Firmware
Qualcomm Wcn7861
All of the following
Qualcomm Wcn7880 Firmware
Qualcomm Wcn7880
All of the following
Qualcomm Wcn7881 Firmware
Qualcomm Wcn7881
All of the following
Qualcomm Wsa8810 Firmware
Qualcomm Wsa8810
All of the following
Qualcomm Wsa8815 Firmware
Qualcomm Wsa8815
All of the following
Qualcomm Wsa8830 Firmware
Qualcomm Wsa8830
All of the following
Qualcomm Wsa8832 Firmware
Qualcomm Wsa8832
All of the following
Qualcomm Wsa8835 Firmware
Qualcomm Wsa8835
All of the following
Qualcomm Wsa8840 Firmware
Qualcomm Wsa8840
All of the following
Qualcomm Wsa8845 Firmware
Qualcomm Wsa8845
All of the following
Qualcomm Wsa8845h Firmware
Qualcomm Wsa8845h
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable Strongbox in the Secure Processor until a vendor-provided fix is available to avoid triggering the buffer overflow described (memory corruption while using Strongbox).
Secure Processor / Strongbox Strongbox usage = disabled - Compensating control
Prevent untrusted or oversized input from reaching the Secure Processor when Strongbox functionality is enabled — for example, apply input size validation at upstream components, isolate the Secure Processor network access, or block Strongbox-related interfaces via firewall/ACLs until a proper patch is released.
Event History
Jun 1, 2026
CVE Published
via MITRE·10:05 PM
Data Sourced
via MITRE·10:05 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-25277?
CVE-2026-25277 has a high severity rating of 8.8.
2
What type of vulnerability is associated with CVE-2026-25277?
CVE-2026-25277 is a buffer overflow vulnerability in Secure Processor.
3
What devices are affected by CVE-2026-25277?
CVE-2026-25277 affects several Qualcomm firmware versions including Cq8750m, Fastconnect 6700, 6800, 6900, 7800, G3x Gen 2, Pandeiro, and Qca6391.
4
How do I mitigate CVE-2026-25277?
To mitigate CVE-2026-25277, update the affected Qualcomm firmware to the latest version as recommended by the vendor.
5
What are the potential impacts of CVE-2026-25277?
The potential impacts of CVE-2026-25277 include memory corruption, which could lead to crashes or unauthorized access.