CVE-2026-57546: Qualcomm Congo Firmware

High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Transient DOS when processing a continuous receive command with a zero-sized global configuration override.

Affected products

• Qualcomm Congo Firmware: affected versions not specified
• Qualcomm Fastconnect 7800 Firmware: affected versions not specified
• Qualcomm Fastconnect 8800 Mobile Connectivity System Firmware: affected versions not specified
• Qualcomm Orne Firmware: affected versions not specified
• Qualcomm Pandeiro Firmware: affected versions not specified
• Qualcomm SM8950 Firmware: affected versions not specified
• Qualcomm SM8950P Firmware: affected versions not specified
• Qualcomm SM8975 Firmware: affected versions not specified
• Qualcomm SM8975P Firmware: affected versions not specified
• Qualcomm WCD9378 Firmware: affected versions not specified
• Qualcomm WCD9395 Firmware: affected versions not specified
• Qualcomm WCN7880 Firmware: affected versions not specified
• Qualcomm WCN7881 Firmware: affected versions not specified
• Qualcomm WCN8841 Firmware: affected versions not specified

Published 2026-10-06. Last modified 2026-10-09.