CVE-2026-25273: Qualcomm Congo Firmware

Medium severity, CVSS 6.7. EPSS: 0.1% chance of exploitation in the next 30 days.

Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.

Affected products

• Qualcomm Congo Firmware: affected versions not specified
• Qualcomm CQ8845S Firmware: affected versions not specified
• Qualcomm CQ8850NS Firmware: affected versions not specified
• Qualcomm Fastconnect 6200 Firmware: affected versions not specified
• Qualcomm Fastconnect 6900 Firmware: affected versions not specified
• Qualcomm Fastconnect 7800 Firmware: affected versions not specified
• Qualcomm Fastconnect 8800 Mobile Connectivity System Firmware: affected versions not specified
• Qualcomm Orne Firmware: affected versions not specified
• Qualcomm Pandeiro Firmware: affected versions not specified
• Qualcomm QMP1000 Firmware: affected versions not specified
• Qualcomm QMP2001 Firmware: affected versions not specified
• Qualcomm SM4875 Firmware: affected versions not specified
• Qualcomm SM6850 Firmware: affected versions not specified
• Qualcomm SM8845P Firmware: affected versions not specified
• Qualcomm SM8950 Firmware: affected versions not specified
• Qualcomm SM8950P Firmware: affected versions not specified
• Qualcomm SM8975 Firmware: affected versions not specified
• Qualcomm SM8975P Firmware: affected versions not specified
• Qualcomm Snapdragon 460 Mobile Platform Firmware: affected versions not specified
• Qualcomm Snapdragon 662 Mobile Platform Firmware: affected versions not specified
• Qualcomm Snapdragon 865 5g Mobile Platform Firmware: affected versions not specified
• Qualcomm Snapdragon 8 Elite Firmware: affected versions not specified
• Qualcomm Snapdragon 8 Elite Gen 5 Firmware: affected versions not specified
• Qualcomm Snapdragon 8 Gen 5 Firmware: affected versions not specified
• Qualcomm Snapdragon XR2+ Gen 1 Platform Firmware: affected versions not specified
• and 26 more

Published 2026-10-06. Last modified 2026-10-09.