Loading story…
Qualcomm released security updates for multiple products to fix one critical and five high-severity vulnerabilities affecting WLAN, modem, and related platform components across a broad set of Snapdragon, FastConnect, QCA, QCN, WCN, WCD, WSA, and modem-RF products. Italy’s national CSIRT said the flaws could enable arbitrary code execution, denial of service, and authentication bypass, and urged organizations to review Qualcomm’s official bulletin for affected versions and remediation details.
The most severe issue, CVE-2026-25289, is a critical stack-based buffer overflow in Qualcomm WLAN firmware with a CVSS 9.6 score, caused by memory corruption when processing malformed Device Capability Extended attributes in certain NAN Service Discovery Frames. Qualcomm also disclosed CVE-2026-24079, a high-severity missing-authentication flaw in data modem registration handling rated CVSS 8.1, which can be triggered with malformed or absent authentication parameters; available records indicate no known exploitation for either issue, but customers were advised to apply vendor patches and update affected system software promptly.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
3 events from the most recent confirmed update back to the earliest known activity.
Qualcomm published CVE-2026-25289, a critical stack-based buffer overflow in WLAN firmware caused by memory corruption while processing certain NAN Service Discovery Frames with invalid length values. Qualcomm advised customers to apply vendor patches and update affected system software.
Qualcomm published CVE-2026-24079, a high-severity missing-authentication vulnerability in data modem registration handling. The advisory says malformed or missing authentication parameters can trigger the issue and recommends applying vendor patches and related cryptographic hardening measures.
Qualcomm released security updates for multiple affected products, addressing one critical and five high-severity vulnerabilities. The vendor bulletin and related notices recommend updating affected products to the patched versions.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
4 references tracked. Mallory keeps watching after this page renders.
cvefeed.io
Open sourcecvefeed.io
Open sourceacn.gov.it
Open sourcedocs.qualcomm.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Qualcomm released security updates for October 2024 to address 20 vulnerabilities across its products, including an actively exploited zero-day and a critical memory-corruption issue. The zero-day, **`CVE-2024-43047`**, affects the Qualcomm Digital Signal Processor (DSP) service used by multiple chipsets and stems from a use-after-free condition that could let a local low-privileged attacker trigger memory corruption on vulnerable devices. Qualcomm also fixed **`CVE-2024-33066`**, a critical input-validation flaw in the WLAN Resource Manager that can likewise lead to memory corruption. The company said customers should deploy updated firmware for affected chipsets as soon as possible, including updates related to the **FASTRPC** driver, as part of the broader bulletin covering all 20 patched issues.
Jul 24, 2026
Qualcomm disclosed and patched several high-severity chipset vulnerabilities affecting Snapdragon, FastConnect, modem, automotive, and IoT products, including **`CVE-2025-27034`**, **`CVE-2025-21483`**, **`CVE-2025-21427`**, **`CVE-2025-27043`**, and **`CVE-2025-21450`**. The flaws span modem, video, RTP, and GPS/GNSS firmware and include remote code execution, memory corruption, buffer over-read, and man-in-the-middle risks. Reported attack paths include malformed PLMN roaming responses, crafted RTP and video-stream payloads, and unauthenticated interception of GNSS assistance data delivered over HTTP. Several issues require no user interaction and affect low-level firmware, raising the risk of bypassing operating system protections; one Qualcomm modem flaw, `CVE-2025-27034`, was reported as exploited in the wild. Qualcomm addressed the issues through July and September 2025 security updates, with exposure likely to persist where OEM firmware rollout lags. Samsung also issued fixes for multiple **Exynos baseband** vulnerabilities, including **`CVE-2024-55568`**, **`CVE-2025-26781`**, **`CVE-2025-26782`**, and **`CVE-2025-54329`**, affecting smartphones, wearables, and modem products. The bugs include NULL pointer dereference, out-of-bounds operations in RLC AM packet handling, and a heap overflow in the NAS signaling layer that can be triggered by malformed LTE or 5G traffic, Mobility Management packets, or multi-payload NAS messages such as SMS. Successful exploitation can crash or hang the modem, reboot devices, or cut off cellular service, and some flaws may be reachable through rogue base stations or compromised network infrastructure before higher-layer authentication or encryption takes effect. Samsung shipped patches in its October and November 2025 security updates, continuing a pattern of baseband security issues previously highlighted in Exynos modem research.
Jun 29, 2026
Qualcomm has issued a security alert regarding multiple newly discovered vulnerabilities in its chipset ecosystem, with particular emphasis on a critical flaw affecting the secure boot process. The most severe vulnerability, identified as CVE-2025-47372 and rated as critical with a CVSS score of 9.0, involves a buffer overflow during the boot sequence that could allow attackers to bypass verification routines, install persistent malicious firmware, or gain control of a device before the operating system loads. This flaw, classified under CWE-120 (Classic Buffer Overflow), impacts a wide range of Snapdragon and QAM devices, and Qualcomm has urged device manufacturers to integrate the necessary fixes into both current and future products. The vulnerability was discovered with the assistance of external researchers and has been highlighted in Qualcomm's December 2025 security bulletin. Security authorities, including the Canadian Centre for Cyber Security, have echoed Qualcomm's advisory, strongly recommending that users and administrators review the bulletin and apply all relevant updates to mitigate the risk. The flaw's presence at such a fundamental stage of device operation underscores the urgency for prompt remediation across affected hardware.
Jun 29, 2026