CVE-2026-25262: Qualcomm MDM9207 Firmware

Medium severity, CVSS 6.3. EPSS: 0.1% chance of exploitation in the next 30 days.

Memory corruption while processing a crafted ELF file in the Primary Bootloader.

Affected products

• Qualcomm MDM9207 Firmware: affected versions not specified
• Qualcomm MDM9645 Firmware: affected versions not specified
• Qualcomm MDM9655 Firmware: affected versions not specified
• Qualcomm MDM9665 Firmware: affected versions not specified
• Qualcomm MSM8909 Firmware: affected versions not specified
• Qualcomm MSM8916 Firmware: affected versions not specified
• Qualcomm MSM8952 Firmware: affected versions not specified
• Qualcomm SDX50 Firmware: affected versions not specified

Published 2026-09-22. Last modified 2026-10-06.