CVE-2026-25270: Qualcomm Cologne Firmware

Medium severity, CVSS 6.7. EPSS: 0.1% chance of exploitation in the next 30 days.

Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.

Affected products

• Qualcomm Cologne Firmware: affected versions not specified
• Qualcomm Congo Firmware: affected versions not specified
• Qualcomm CQ2390M Firmware: affected versions not specified
• Qualcomm CQ2390S Firmware: affected versions not specified
• Qualcomm CQ7790 Firmware: affected versions not specified
• Qualcomm CQ8725S Firmware: affected versions not specified
• Qualcomm CQ8750M Firmware: affected versions not specified
• Qualcomm CQ8845S Firmware: affected versions not specified
• Qualcomm CQ8850NS Firmware: affected versions not specified
• Qualcomm CSRA6620 Firmware: affected versions not specified
• Qualcomm CSRA6640 Firmware: affected versions not specified
• Qualcomm Fastconnect 6200 Firmware: affected versions not specified
• Qualcomm Fastconnect 6700 Firmware: affected versions not specified
• Qualcomm Fastconnect 6900 Firmware: affected versions not specified
• Qualcomm Fastconnect 7800 Firmware: affected versions not specified
• Qualcomm Fastconnect 8800 Mobile Connectivity System Firmware: affected versions not specified
• Qualcomm g1 Gen 1 Firmware: affected versions not specified
• Qualcomm g2 Gen 1 Firmware: affected versions not specified
• Qualcomm g3x Gen 2 Firmware: affected versions not specified
• Qualcomm Iq-615 Firmware: affected versions not specified
• Qualcomm Iq-8275 Firmware: affected versions not specified
• Qualcomm Iq-9075 Firmware: affected versions not specified
• Qualcomm Kalpeni Firmware: affected versions not specified
• Qualcomm Lemans Au Lgit Firmware: affected versions not specified
• Qualcomm Lemansau Firmware: affected versions not specified
• and 178 more

Published 2026-10-06. Last modified 2026-10-09.