CVE-2026-25278: Qualcomm Lemans Au Lgit Firmware

High severity, CVSS 7.0. EPSS: 0.1% chance of exploitation in the next 30 days.

Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying.

Affected products

• Qualcomm Lemans Au Lgit Firmware: affected versions not specified
• Qualcomm Lemansau Firmware: affected versions not specified
• Qualcomm QAM8255P Firmware: affected versions not specified
• Qualcomm QAM8295P Firmware: affected versions not specified
• Qualcomm QAM8620P Firmware: affected versions not specified
• Qualcomm QAMSRV1H Firmware: affected versions not specified
• Qualcomm QAMSRV1M Firmware: affected versions not specified
• Qualcomm QCA6574AU Firmware: affected versions not specified
• Qualcomm QCA6595 Firmware: affected versions not specified
• Qualcomm QCA6595AU Firmware: affected versions not specified
• Qualcomm QCA6688AQ Firmware: affected versions not specified
• Qualcomm QCA6696 Firmware: affected versions not specified
• Qualcomm QCA6698AQ Firmware: affected versions not specified
• Qualcomm QCA6797AQ Firmware: affected versions not specified
• Qualcomm QCA8695AU Firmware: affected versions not specified
• Qualcomm SA6155P Firmware: affected versions not specified
• Qualcomm SA7255P Firmware: affected versions not specified
• Qualcomm SA7775P Firmware: affected versions not specified
• Qualcomm SA8155P Firmware: affected versions not specified
• Qualcomm SA8195P Firmware: affected versions not specified
• Qualcomm SA8255P Firmware: affected versions not specified
• Qualcomm SA8295P Firmware: affected versions not specified
• Qualcomm SA8540P Firmware: affected versions not specified
• Qualcomm SA8620P Firmware: affected versions not specified
• Qualcomm SA8770P Firmware: affected versions not specified
• and 4 more

Published 2026-09-17. Last modified 2026-09-22.