CVE-2026-25288: Qualcomm Cologne Firmware

High severity, CVSS 7.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size.

Affected products

• Qualcomm Cologne Firmware: affected versions not specified
• Qualcomm CQ7790 Firmware: affected versions not specified
• Qualcomm Fastconnect 6900 Firmware: affected versions not specified
• Qualcomm Fastconnect 7800 Firmware: affected versions not specified
• Qualcomm Molokai Firmware: affected versions not specified
• Qualcomm Orne Firmware: affected versions not specified
• Qualcomm PALAWAN25 Firmware: affected versions not specified
• Qualcomm Pandeiro Firmware: affected versions not specified
• Qualcomm QLN1083BD Firmware: affected versions not specified
• Qualcomm QLN1086BD Firmware: affected versions not specified
• Qualcomm QMB715 Firmware: affected versions not specified
• Qualcomm QMP1000 Firmware: affected versions not specified
• Qualcomm QMP2001 Firmware: affected versions not specified
• Qualcomm QPA1083BD Firmware: affected versions not specified
• Qualcomm QPA1086BD Firmware: affected versions not specified
• Qualcomm QXM1093 Firmware: affected versions not specified
• Qualcomm QXM1094 Firmware: affected versions not specified
• Qualcomm QXM1095 Firmware: affected versions not specified
• Qualcomm QXM1096 Firmware: affected versions not specified
• Qualcomm SC8380XP Firmware: affected versions not specified
• Qualcomm SM6850 Firmware: affected versions not specified
• Qualcomm SM8735P Firmware: affected versions not specified
• Qualcomm SM8845P Firmware: affected versions not specified
• Qualcomm Snapdragon 7 Gen 4 Mobile Platform Firmware: affected versions not specified
• Qualcomm Snapdragon 8 Elite Gen 5 Firmware: affected versions not specified
• and 29 more

Published 2026-08-04. Last modified 2026-08-06.