---
id: CVE-2026-25274
title: >-
  Memory Corruption when processing concurrent DMA buffer allocation and
  deallocation commands without proper synchronization.
summary: >-
  Memory Corruption when processing concurrent DMA buffer allocation and
  deallocation commands without proper synchronization.
severity: medium
cvss: 6.7
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-416
vendor: 'Qualcomm, Inc.'
product: Snapdragon
affected:
  - Snapdragon AQT1000
  - Snapdragon Cologne
  - Snapdragon Congo
  - Snapdragon FastConnect 6200
  - Snapdragon FastConnect 6700
  - Snapdragon FastConnect 6800
  - Snapdragon FastConnect 6900
  - Snapdragon FastConnect 7800
  - Snapdragon IQX5121
  - Snapdragon QCA0000
  - Snapdragon QCA2062
  - Snapdragon QCA2064
  - Snapdragon QCA2065
  - Snapdragon QCA2066
  - Snapdragon QCA6391
  - Snapdragon QCA6420
  - Snapdragon QCA6430
  - Snapdragon QCC2073
  - Snapdragon QCC2076
  - Snapdragon QCM5430
  - Snapdragon QCM6490
  - Snapdragon Qualcomm Dragonwing IQ-X
  - Snapdragon Qualcomm FastConnect 8800 Mobile Connectivity System
  - Snapdragon Qualcomm Video Collaboration VC3 Platform
  - Snapdragon SC8380XP
  - Snapdragon Snapdragon 7c+ Gen 3 Compute
  - Snapdragon Snapdragon 8c Compute Platform "Poipu Lite"
  - Snapdragon Snapdragon 8cx Compute Platform
  - Snapdragon Snapdragon 8cx Gen 2 5G Compute Platform "Poipu Pro"
  - Snapdragon Snapdragon 8cx Gen 3 Compute Platform
  - Snapdragon Snapdragon X2 Elite
  - Snapdragon WCD9340
  - Snapdragon WCD9341
  - Snapdragon WCD9370
  - Snapdragon WCD9375
  - Snapdragon WCD9378C
  - Snapdragon WCD9380
  - Snapdragon WCD9385
  - Snapdragon WSA8810
  - Snapdragon WSA8815
  - Snapdragon WSA8830
  - Snapdragon WSA8835
  - Snapdragon WSA8840
  - Snapdragon WSA8845
  - Snapdragon WSA8845H
published: '2026-10-06'
updated: '2026-10-06'
sourceUpdated: '2026-10-06T07:16:57.770'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-25274'
references:
  - url: >-
      https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2026-bulletin.html
    label: product-security@qualcomm.com
tags:
  - nvd
  - cve.org
ingestedAt: '2026-10-06T07:49:23.040Z'
---

## Overview

Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.