---
id: CVE-2026-25263
title: >-
  Memory corruption while processing IOCTL command called from user space to the
  kernel with invalid parameters.
summary: >-
  Memory corruption while processing IOCTL command called from user space to the
  kernel with invalid parameters.
severity: medium
cvss: 6.6
cvssVector: 'CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:L'
cwe:
  - CWE-787
vendor: 'Qualcomm, Inc.'
product: Snapdragon
affected:
  - Snapdragon 315 5G IoT Modem
  - Snapdragon 5G Fixed Wireless Access Platform
  - Snapdragon Cologne
  - Snapdragon CQ7790
  - Snapdragon CQ8725S
  - Snapdragon CQ8750M
  - Snapdragon CSRB31024
  - Snapdragon C-V2X 9150
  - Snapdragon FastConnect 6200
  - Snapdragon FastConnect 6700
  - Snapdragon FastConnect 6800
  - Snapdragon FastConnect 6900
  - Snapdragon FastConnect 7800
  - Snapdragon G1 Gen 1
  - Snapdragon IQ10 Series
  - Snapdragon IQ6 Series Platform
  - Snapdragon IQ8 Series Platform
  - Snapdragon IQ9 Series Platform
  - Snapdragon Kalpeni
  - Snapdragon LeMans_AU_LGIT
  - Snapdragon LeMansAU
  - Snapdragon MBM415
  - Snapdragon MBM715
  - Snapdragon Milos
  - Snapdragon Monaco_IOT
  - Snapdragon Orne
  - Snapdragon Palawan25
  - Snapdragon Pandeiro
  - Snapdragon Q-4390
  - Snapdragon QAM8255P
  - Snapdragon QAM8295P
  - Snapdragon QAM8620P
  - Snapdragon QAMSRV1H
  - Snapdragon QAMSRV1M
  - Snapdragon QCA6310
  - Snapdragon QCA6335
  - Snapdragon QCA6391
  - Snapdragon QCA6426
  - Snapdragon QCA6436
  - Snapdragon QCA6564AU
  - Snapdragon QCA6574
  - Snapdragon QCA6574A
  - Snapdragon QCA6574AU
  - Snapdragon QCA6595
  - Snapdragon QCA6595AU
  - Snapdragon QCA6678AQ
  - Snapdragon QCA6688AQ
  - Snapdragon QCA6696
  - Snapdragon QCA6698AQ
  - Snapdragon QCA6698AU
published: '2026-10-06'
updated: '2026-10-06'
sourceUpdated: '2026-10-06T07:16:56.747'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-25263'
references:
  - url: >-
      https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2026-bulletin.html
    label: product-security@qualcomm.com
tags:
  - nvd
  - cve.org
ingestedAt: '2026-10-06T07:49:23.037Z'
---

## Overview

Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.