---
id: CVE-2026-25302
title: >-
  Cryptographic Issue when processing non-ELF partitions, authentication and
  signature checks are bypassed, allowing unsigned or corrupted images to be
  mounted and processed.
summary: >-
  Cryptographic Issue when processing non-ELF partitions, authentication and
  signature checks are bypassed, allowing unsigned or corrupted images to be
  mounted and processed.
severity: high
cvss: 7.1
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H'
cwe:
  - CWE-347
vendor: 'Qualcomm, Inc.'
product: Snapdragon
affected:
  - Snapdragon 5G Fixed Wireless Access Platform
  - Snapdragon AR8035
  - Snapdragon Cologne
  - Snapdragon CQ7790
  - Snapdragon CQ8725S
  - Snapdragon CQ8750M
  - Snapdragon CSRA6620
  - Snapdragon CSRA6640
  - Snapdragon FastConnect 6200
  - Snapdragon FastConnect 6700
  - Snapdragon FastConnect 6800
  - Snapdragon FastConnect 6900
  - Snapdragon FastConnect 7800
  - Snapdragon FWA Gen 3 Ultra Platform
  - Snapdragon FWA Gen 5 Elite Platform
  - Snapdragon G1 Gen 1
  - Snapdragon G2 Gen 1
  - Snapdragon G3x Gen 2
  - Snapdragon IPQ9048
  - Snapdragon IPQ9570
  - Snapdragon IPQ9574
  - Snapdragon IQ10 Series
  - Snapdragon IQ6 Series Platform
  - Snapdragon IQ8 Series Platform
  - Snapdragon IQ9 Series Platform
  - Snapdragon IQX5121
  - Snapdragon Kalpeni
  - Snapdragon Kobuk
  - Snapdragon LeMans_AU_LGIT
  - Snapdragon LeMansAU
  - Snapdragon Marina
  - Snapdragon MBM415
  - Snapdragon MBM715
  - Snapdragon Milos
  - Snapdragon Monaco_IOT
  - Snapdragon NPro A8 Elite Platform
  - Snapdragon Orne
  - Snapdragon Palawan25
  - Snapdragon Pandeiro
  - Snapdragon Q-2390
  - Snapdragon Q-4390
  - Snapdragon QAM8255P
  - Snapdragon QAM8295P
  - Snapdragon QAM8620P
  - Snapdragon QAMSRV1H
  - Snapdragon QAMSRV1M
  - Snapdragon QCA0000
  - Snapdragon QCA6174A
  - Snapdragon QCA6391
  - Snapdragon QCA6421
published: '2026-10-06'
updated: '2026-10-06'
sourceUpdated: '2026-10-06T07:16:58.040'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-25302'
references:
  - url: >-
      https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2026-bulletin.html
    label: product-security@qualcomm.com
tags:
  - nvd
  - cve.org
ingestedAt: '2026-10-06T07:49:23.041Z'
---

## Overview

Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.