CVE-2025-59606: Qualcomm Cologne Firmware

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization.

Affected products

• Qualcomm Cologne Firmware: affected versions not specified
• Qualcomm CQ7790 Firmware: affected versions not specified
• Qualcomm CQ8725S Firmware: affected versions not specified
• Qualcomm CQ8750M Firmware: affected versions not specified
• Qualcomm Fastconnect 6200 Firmware: affected versions not specified
• Qualcomm Fastconnect 6700 Firmware: affected versions not specified
• Qualcomm Fastconnect 6900 Firmware: affected versions not specified
• Qualcomm Fastconnect 7800 Firmware: affected versions not specified
• Qualcomm g2 Gen 1 Firmware: affected versions not specified
• Qualcomm Iq-615 Firmware: affected versions not specified
• Qualcomm Iq-8275 Firmware: affected versions not specified
• Qualcomm Iq-9075 Firmware: affected versions not specified
• Qualcomm Lemans Au Lgit Firmware: affected versions not specified
• Qualcomm Lemansau Firmware: affected versions not specified
• Qualcomm Molokai Firmware: affected versions not specified
• Qualcomm Monaco IoT Firmware: affected versions not specified
• Qualcomm Netrani Firmware: affected versions not specified
• Qualcomm Orne Firmware: affected versions not specified
• Qualcomm PALAWAN25 Firmware: affected versions not specified
• Qualcomm Pandeiro Firmware: affected versions not specified
• Qualcomm QAM8255P Firmware: affected versions not specified
• Qualcomm QAM8295P Firmware: affected versions not specified
• Qualcomm QAM8397P Firmware: affected versions not specified
• Qualcomm QAM8620P Firmware: affected versions not specified
• Qualcomm QAM8797P Firmware: affected versions not specified
• and 116 more

Published 2026-06-01. Last modified 2026-07-22.