CVE-2026-25272: Qualcomm Cologne Firmware

Medium severity, CVSS 6.7. EPSS: 0.1% chance of exploitation in the next 30 days.

Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.

Affected products

• Qualcomm Cologne Firmware: affected versions not specified
• Qualcomm CQ2390M Firmware: affected versions not specified
• Qualcomm CQ2390S Firmware: affected versions not specified
• Qualcomm CQ8750M Firmware: affected versions not specified
• Qualcomm CQ8845S Firmware: affected versions not specified
• Qualcomm CQ8850NS Firmware: affected versions not specified
• Qualcomm Fastconnect 6200 Firmware: affected versions not specified
• Qualcomm Fastconnect 6700 Firmware: affected versions not specified
• Qualcomm Fastconnect 6900 Firmware: affected versions not specified
• Qualcomm Fastconnect 7800 Firmware: affected versions not specified
• Qualcomm g2 Gen 1 Firmware: affected versions not specified
• Qualcomm g3x Gen 2 Firmware: affected versions not specified
• Qualcomm Iq-615 Firmware: affected versions not specified
• Qualcomm Iq-8275 Firmware: affected versions not specified
• Qualcomm Iq-9075 Firmware: affected versions not specified
• Qualcomm Lemans Au Lgit Firmware: affected versions not specified
• Qualcomm Lemansau Firmware: affected versions not specified
• Qualcomm MBM415 Firmware: affected versions not specified
• Qualcomm MBM715 Firmware: affected versions not specified
• Qualcomm Milos Firmware: affected versions not specified
• Qualcomm Milos IoT Firmware: affected versions not specified
• Qualcomm Monaco IoT Firmware: affected versions not specified
• Qualcomm Netrani Firmware: affected versions not specified
• Qualcomm Orne Firmware: affected versions not specified
• Qualcomm PALAWAN25 Firmware: affected versions not specified
• and 130 more

Published 2026-10-06. Last modified 2026-10-09.