QSearchQSearch

CVE-2026-25276

8.8 HIGH

Memory corruption while using Strongbox due to missing bounds check

Published: 2026-06-01 · Last updated: 2026-06-02

Severity and scoring

CVSS
8.8 HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CWE
CWE-129

Affected products

VendorProduct
qualcommcq8750m_firmware, fastconnect_6700_firmware, fastconnect_6800_firmware

Description

Memory corruption while using Strongbox due to missing bounds check.

Source: NVD

References

Related CVEs

Same vendor

  • CVE-2026-25277 — Memory corruption while using Strongbox due to buffer overflow (8.8 HIGH)
  • CVE-2026-25260 — Memory Corruption when accessing shared buffers without validation of concurrent user-mode input modifications (7.8 HIGH)
  • CVE-2026-25259 — Memory corruption while processing multiple IOCTL command for escape operations (7.8 HIGH)
  • CVE-2026-25258 — Memory corruption while processing IOCTL calls for escape operations (7.8 HIGH)
  • CVE-2026-24092 — Memory Corruption when processing fastboot commands to set display mode (7.2 HIGH)

Same CWE

  • CVE-2026-45624 — ImageMagick is free and open-source software used for editing and manipulating digital images (5.1 MEDIUM)
  • CVE-2026-45359 — ImageMagick is free and open-source software used for editing and manipulating digital images (5.7 MEDIUM)
  • CVE-2026-24181 — NVIDIA DALI contains a vulnerability in a component where an attacker could cause an improper index validation (7.3 HIGH)
  • CVE-2026-46163 — In the Linux kernel, the following vulnerability has been resolved: wifi: b43legacy: enforce bounds check on firmware key index in RX pa... (7.8 HIGH)
  • CVE-2026-45104 — MapServer is a system for developing web-based GIS applications (7.5 HIGH)