{"id":"CVE-2026-25291","title":"Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.","summary":"Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"vendor":"Qualcomm, Inc.","product":"Snapdragon","affected":["Snapdragon FastConnect 6700","Snapdragon FastConnect 6900","Snapdragon FastConnect 7800","Snapdragon LeMans_AU_LGIT","Snapdragon LeMansAU","Snapdragon Orne","Snapdragon Pandeiro","Snapdragon QAM8255P","Snapdragon QAM8295P","Snapdragon QAMSRV1H","Snapdragon QAMSRV1M","Snapdragon QCA6391","Snapdragon QCA6574AU","Snapdragon QCA6595","Snapdragon QCA6696","Snapdragon QCA6698AQ","Snapdragon QCA6797AQ","Snapdragon QCM4290","Snapdragon QCM5430","Snapdragon QCM6490","Snapdragon QCM8838","Snapdragon QCS4290","Snapdragon QLN1083BD","Snapdragon QLN1086BD","Snapdragon QPA1083BD","Snapdragon QPA1086BD","Snapdragon Qualcomm Dragonwing Q-8845","Snapdragon Qualcomm Video Collaboration VC3 Platform","Snapdragon QXM1083","Snapdragon QXM1086","Snapdragon QXM1093","Snapdragon QXM1094","Snapdragon QXM1095","Snapdragon QXM1096","Snapdragon SA7255P","Snapdragon SA7775P","Snapdragon SA8155P","Snapdragon SA8255P","Snapdragon SA8295P","Snapdragon SA8620P","Snapdragon SA8770P","Snapdragon SA9000P","Snapdragon SAR1165P","Snapdragon SC8380XP","Snapdragon SD662","Snapdragon SDR753","Snapdragon SM6225P","Snapdragon SM7325P","Snapdragon Snapdragon 460 Mobile Platform","Snapdragon Snapdragon 662 Mobile Platform"],"published":"2026-10-06","updated":"2026-10-06","sourceUpdated":"2026-10-06T07:16:57.893","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-25291","references":[{"url":"https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2026-bulletin.html","label":"product-security@qualcomm.com"}],"tags":["nvd","cve.org"],"ingestedAt":"2026-10-06T07:49:23.040Z","slug":"CVE-2026-25291","body":"## Overview\n\nMemory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}