CVE-2026-25278: Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive Software platform based on QNX
Published Sep 17, 2026
·Updated
Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying.
Affected Software
59 affected components
BlackBerry QNX
All of the following
Qualcomm Lemans Au Lgit Firmware
Qualcomm Lemans Au Lgit
All of the following
Qualcomm Lemansau Firmware
Qualcomm Lemansau
All of the following
Qualcomm Qam8255p Firmware
Qualcomm Qam8255p
All of the following
Qualcomm Qam8295p Firmware
Qualcomm Qam8295p
All of the following
Qualcomm Qam8620p Firmware
Qualcomm Qam8620p
All of the following
Qualcomm Qamsrv1h Firmware
Qualcomm Qamsrv1h
All of the following
Qualcomm Qamsrv1m Firmware
Qualcomm Qamsrv1m
All of the following
Qualcomm Qca6574au Firmware
Qualcomm QCA6574AU
All of the following
Qualcomm Qca6595 Firmware
Qualcomm Qca6595
All of the following
Qualcomm Qca6595au Firmware
Qualcomm Qca6595au
All of the following
Qualcomm Qca6688aq Firmware
Qualcomm Qca6688aq
All of the following
Qualcomm Qca6696 Firmware
Qualcomm Qca6696
All of the following
Qualcomm Qca6698aq Firmware
Qualcomm Qca6698aq
All of the following
Qualcomm Qca6797aq Firmware
Qualcomm Qca6797aq
All of the following
Qualcomm Qca8695au Firmware
Qualcomm Qca8695au
All of the following
Qualcomm Sa6155p Firmware
Qualcomm Sa6155p
All of the following
Qualcomm Sa7255p Firmware
Qualcomm Sa7255p
All of the following
Qualcomm Sa7775p Firmware
Qualcomm Sa7775p
All of the following
Qualcomm Sa8155p Firmware
Qualcomm Sa8155p
All of the following
Qualcomm Sa8195p Firmware
Qualcomm Sa8195p
All of the following
Qualcomm Sa8255p Firmware
Qualcomm Sa8255p
All of the following
Qualcomm Sa8295p Firmware
Qualcomm Sa8295p
All of the following
Qualcomm Sa8540p Firmware
Qualcomm Sa8540p
All of the following
Qualcomm Sa8620p Firmware
Qualcomm Sa8620p
All of the following
Qualcomm Sa8770p Firmware
Qualcomm Sa8770p
All of the following
Qualcomm Sa9000p Firmware
Qualcomm Sa9000p
All of the following
Qualcomm Srv1h Firmware
Qualcomm Srv1h
All of the following
Qualcomm Srv1l Firmware
Qualcomm Srv1l
All of the following
Qualcomm Srv1m Firmware
Qualcomm Srv1m
Event History
Sep 17, 2026
CVE Published
via MITRE·04:11 AM
Data Sourced
via MITRE·04:11 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:17 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The CVSS vector indicates local access and low privileges are required. No user interaction is required.
2
What could successful exploitation impact?
The affected condition can lead to memory corruption while processing I2C transfer requests. The CVSS vector indicates potential high impact to confidentiality, integrity, and availability.