CVE-2026-25302: Qualcomm AR8035 Firmware

High severity, CVSS 7.1. EPSS: 0.1% chance of exploitation in the next 30 days.

Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.

Affected products

• Qualcomm AR8035 Firmware: affected versions not specified
• Qualcomm Cologne Firmware: affected versions not specified
• Qualcomm CQ2390M Firmware: affected versions not specified
• Qualcomm CQ2390S Firmware: affected versions not specified
• Qualcomm CQ7790 Firmware: affected versions not specified
• Qualcomm CQ7790M Firmware: affected versions not specified
• Qualcomm CQ8725S Firmware: affected versions not specified
• Qualcomm CQ8750M Firmware: affected versions not specified
• Qualcomm CQ8845S Firmware: affected versions not specified
• Qualcomm CQ8850NS Firmware: affected versions not specified
• Qualcomm CSRA6620 Firmware: affected versions not specified
• Qualcomm CSRA6640 Firmware: affected versions not specified
• Qualcomm Fastconnect 6200 Firmware: affected versions not specified
• Qualcomm Fastconnect 6700 Firmware: affected versions not specified
• Qualcomm Fastconnect 6800 Firmware: affected versions not specified
• Qualcomm Fastconnect 6900 Firmware: affected versions not specified
• Qualcomm Fastconnect 7800 Firmware: affected versions not specified
• Qualcomm Flight RB5 5g Platform Firmware: affected versions not specified
• Qualcomm FSM20055 Firmware: affected versions not specified
• Qualcomm FSM200 Platform Firmware: affected versions not specified
• Qualcomm Fwa Gen 3 Ultra Firmware: affected versions not specified
• Qualcomm Fwa Gen 5 Elite Firmware: affected versions not specified
• Qualcomm g1 Gen 1 Firmware: affected versions not specified
• Qualcomm g2 Gen 1 Firmware: affected versions not specified
• Qualcomm g3x Gen 2 Firmware: affected versions not specified
• and 267 more

Published 2026-10-06. Last modified 2026-10-09.