Vulnerabilities ›

CVE-2026-25260

High

CWE-367 — Weakness Type

                    Published: Jun 1, 2026                      ·  Modified: Jun 8, 2026                      ·  Source: NVD                

CVSS v3

7.8

🔗 NVD Official

📄 Description (English)

Memory Corruption when accessing shared buffers without validation of concurrent user-mode input modifications.

🤖 AI Executive Summary

CVE-2026-25260 is a memory corruption vulnerability (CVSS 7.8) caused by improper validation of concurrent user-mode input modifications to shared buffers. This race condition can lead to unauthorized memory access and potential system compromise.

📄 Description (Arabic)

هذه الثغرة تنشأ من عدم التحقق من التعديلات المتزامنة على المخازن المشتركة بين عمليات المستخدم والنظام. يمكن للمهاجمين استغلال حالات التنافس (Race Conditions) للوصول إلى مناطق ذاكرة حساسة أو تعديلها. قد يؤدي هذا إلى تنفيذ كود عشوائي أو رفع الامتيازات.

🤖 ملخص تنفيذي (AI)

هذا الثغرة تتعلق بفساد الذاكرة الناتج عن عدم التحقق من التعديلات المتزامنة على المخازن المشتركة. يمكن للمهاجمين استغلال هذا الضعف للوصول غير المصرح به إلى الذاكرة.

🤖 AI Intelligence Analysis Analyzed: Jun 6, 2026 18:10

🇸🇦 Saudi Arabia Impact Assessment

Saudi Relevance: high

🏢 Affected Saudi Sectors

banking telecom energy government healthcare

🎯 MITRE ATT&CK Techniques

T1055 T1134 T1548

⚖️ Saudi Risk Score (AI)

8.0

/ 10.0

🔧 Remediation Steps (English)

Apply security patches immediately. Implement proper synchronization mechanisms (mutexes, semaphores) for shared buffer access. Add input validation and bounds checking for all concurrent operations. Conduct code review focusing on race conditions and TOCTOU vulnerabilities. Enable Address Space Layout Randomization (ASLR) and Data Execution Prevention (DEP).

🔧 خطوات المعالجة (العربية)

تطبيق التحديثات الأمنية فوراً. تنفيذ آليات المزامنة المناسبة للوصول إلى المخازن المشتركة. إضافة التحقق من صحة المدخلات والفحص الحدودي. مراجعة الكود للتركيز على حالات التنافس. تفعيل ASLR و DEP.

📋 Regulatory Compliance Mapping

🟢 NCA ECC 2024

2.1 2.2 3.1

🔵 SAMA CSF

AC-2 AC-3 SI-7

🟡 ISO 27001:2022

A.12.2.1 A.12.6.1 A.14.2.1

🔗 References & Sources 1

🔗

https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bulletin.html

product-security@qualcomm.com

Vendor Advisory

📦 Affected Products / CPE 35 entries

qualcomm:cologne_firmware:-

qualcomm:fastconnect_6700_firmware:-

qualcomm:fastconnect_6900_firmware:-

qualcomm:fastconnect_7800_firmware:-

qualcomm:qcm5430_firmware:-

qualcomm:qcm6490_firmware:-

qualcomm:video_collaboration_vc3_platform_firmware:-

qualcomm:sc8380xp_firmware:-

qualcomm:sd865_5g_firmware:-

qualcomm:snapdragon_ar1_gen_1_platform_firmware:-

qualcomm:snapdragon_xr2_5g_platform_firmware:-

qualcomm:snapdragon_xr2\+_gen_1_platform_firmware:-

qualcomm:sxr2230p_firmware:-

qualcomm:sxr2250p_firmware:-

qualcomm:wcd9370_firmware:-

qualcomm:wcd9375_firmware:-

qualcomm:wcd9378c_firmware:-

qualcomm:wcd9380_firmware:-

qualcomm:wcd9385_firmware:-

qualcomm:wsa8810_firmware:-

qualcomm:wsa8815_firmware:-

qualcomm:wsa8830_firmware:-

qualcomm:wsa8832_firmware:-

qualcomm:wsa8835_firmware:-

qualcomm:wsa8840_firmware:-

qualcomm:wsa8845_firmware:-

qualcomm:wsa8845h_firmware:-

qualcomm:x2000077_firmware:-

qualcomm:x2000086_firmware:-

qualcomm:x2000090_firmware:-

qualcomm:x2000092_firmware:-

qualcomm:x2000094_firmware:-

qualcomm:xg101002_firmware:-

qualcomm:xg101032_firmware:-

qualcomm:xg101039_firmware:-

📊 CVSS Score

7.8

/ 10.0 — High

📊 CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack VectorL — Low / Local

Attack ComplexityL — Low / Local

Privileges RequiredL — Low / Local

User InteractionN — None / Network

ScopeU — Unchanged

ConfidentialityH — High

IntegrityH — High

AvailabilityH — High

📋 Quick Facts

Severity High

CVSS Score7.8

CWECWE-367

EPSS0.01%

Exploit No

Patch ✗ No

Published 2026-06-01

Source Feed nvd

🇸🇦 Saudi Risk Score

8.0

/ 10.0 — Saudi Risk

Priority: HIGH

🏷️ Tags

CWE-367

🏢 Vendor Advisories

🔗 https://docs.qualcomm.com/product/publicresources/se...

⚡ Actions

🔗 NVD Official Page ⚡ Exploit-DB Search 🐙 GitHub PoC Search 🎯 MITRE ATT&CK 📊 CVE Details

CVE-2026-25260

Introduce Yourself

Sign In Required