CVE-2026-57537: Qualcomm Congo Firmware

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.

Affected products

• Qualcomm Congo Firmware: affected versions not specified
• Qualcomm Fastconnect 6200 Firmware: affected versions not specified
• Qualcomm Fastconnect 6900 Firmware: affected versions not specified
• Qualcomm Fastconnect 7800 Firmware: affected versions not specified
• Qualcomm Fastconnect 8800 Mobile Connectivity System Firmware: affected versions not specified
• Qualcomm Orne Firmware: affected versions not specified
• Qualcomm Pandeiro Firmware: affected versions not specified
• Qualcomm QCA6595AU Firmware: affected versions not specified
• Qualcomm QCA6698AQ Firmware: affected versions not specified
• Qualcomm QCA6797AQ Firmware: affected versions not specified
• Qualcomm QCA8695AU Firmware: affected versions not specified
• Qualcomm QCM8838 Firmware: affected versions not specified
• Qualcomm QLN1083BD Firmware: affected versions not specified
• Qualcomm QLN1086BD Firmware: affected versions not specified
• Qualcomm QMP1000 Firmware: affected versions not specified
• Qualcomm QMP2001 Firmware: affected versions not specified
• Qualcomm QPA1083BD Firmware: affected versions not specified
• Qualcomm QPA1086BD Firmware: affected versions not specified
• Qualcomm QXM1083 Firmware: affected versions not specified
• Qualcomm QXM1086 Firmware: affected versions not specified
• Qualcomm QXM1093 Firmware: affected versions not specified
• Qualcomm QXM1094 Firmware: affected versions not specified
• Qualcomm QXM1095 Firmware: affected versions not specified
• Qualcomm QXM1096 Firmware: affected versions not specified
• Qualcomm SAR1165P Firmware: affected versions not specified
• and 47 more

Published 2026-10-06. Last modified 2026-10-09.