Vulnerabilities ›

CVE-2026-25277

High

CWE-120 — Weakness Type

                    Published: Jun 1, 2026                      ·  Modified: Jun 8, 2026                      ·  Source: NVD                

CVSS v3

8.8

🔗 NVD Official

📄 Description (English)

Memory corruption while using Strongbox due to buffer overflow.

🤖 AI Executive Summary

CVE-2026-25277 is a high-severity buffer overflow vulnerability in Strongbox that allows memory corruption through improper buffer handling. Attackers can exploit this flaw to execute arbitrary code or cause denial of service on affected systems.

📄 Description (Arabic)

ثغرة تجاوز المخزن المؤقت في Strongbox تنتج عن معالجة غير آمنة للبيانات المدخلة، مما يسمح بفساد الذاكرة. يمكن للمهاجمين استخدام هذه الثغرة لتنفيذ كود عشوائي أو إيقاف الخدمات بشكل متعمد.

🤖 ملخص تنفيذي (AI)

CVE-2026-25277 عبارة عن ثغرة تجاوز المخزن المؤقت عالية الخطورة في Strongbox تسمح بفساد الذاكرة من خلال معالجة غير صحيحة للمخزن المؤقت. يمكن للمهاجمين استغلال هذه الثغرة لتنفيذ كود تعسفي أو التسبب في رفض الخدمة على الأنظمة المتأثرة.

🤖 AI Intelligence Analysis Analyzed: Jun 6, 2026 18:09

🇸🇦 Saudi Arabia Impact Assessment

Saudi Relevance: high

🏢 Affected Saudi Sectors

banking government healthcare telecom

🎯 MITRE ATT&CK Techniques

T1190 T1203 T1499

⚖️ Saudi Risk Score (AI)

9.0

/ 10.0

🔧 Remediation Steps (English)

Update Strongbox to the latest patched version immediately. Implement input validation and bounds checking. Deploy network segmentation to limit exposure. Monitor systems for exploitation attempts and apply security patches as soon as available.

🔧 خطوات المعالجة (العربية)

قم بتحديث Strongbox إلى أحدث إصدار مصحح فوراً. طبق التحقق من صحة المدخلات والتحقق من الحدود. قم بنشر تقسيم الشبكة لتقليل التعرض. راقب الأنظمة لمحاولات الاستغلال وطبق تصحيحات الأمان في أقرب وقت ممكن.

📋 Regulatory Compliance Mapping

🟢 NCA ECC 2024

A.7.1 A.12.2.1 A.12.6.1

🔵 SAMA CSF

ID.BE-1 PR.DS-1 PR.DS-6 DE.CM-1

🟡 ISO 27001:2022

A.12.2.1 A.12.6.1 A.14.2.1

🔗 References & Sources 1

🔗

https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bulletin.html

product-security@qualcomm.com

Vendor Advisory

📦 Affected Products / CPE 50 entries

qualcomm:cq8750m_firmware:-

qualcomm:fastconnect_6700_firmware:-

qualcomm:fastconnect_6800_firmware:-

qualcomm:fastconnect_6900_firmware:-

qualcomm:fastconnect_7800_firmware:-

qualcomm:g3x_gen_2_firmware:-

qualcomm:pandeiro_firmware:-

qualcomm:qca6391_firmware:-

qualcomm:qca6698au_firmware:-

qualcomm:qca6797aq_firmware:-

qualcomm:qcm5430_firmware:-

qualcomm:qcm6490_firmware:-

qualcomm:qcm8838_firmware:-

qualcomm:qcn9011_firmware:-

qualcomm:qcn9012_firmware:-

qualcomm:qcs8550_firmware:-

qualcomm:video_collaboration_vc3_platform_firmware:-

qualcomm:sd865_5g_firmware:-

qualcomm:sdr753_firmware:-

qualcomm:sm8550p_firmware:-

qualcomm:sm8650q_firmware:-

qualcomm:sm8750p_firmware:-

qualcomm:snapdragon_460_mobile_platform_firmware:-

qualcomm:snapdragon_662_mobile_platform_firmware:-

qualcomm:snapdragon_8_elite_firmware:-

qualcomm:snapdragon_8_elite_gen_5_firmware:-

qualcomm:snapdragon_8_gen_2_mobile_platform_firmware:-

qualcomm:snapdragon_8_gen_3_mobile_platform_firmware:-

qualcomm:snapdragon_8\+_gen_2_mobile_platform_firmware:-

qualcomm:snapdragon_865_5g_mobile_platform_firmware:-

qualcomm:snapdragon_865\+_5g_mobile_platform_firmware:-

qualcomm:snapdragon_870_5g_mobile_platform_firmware:-

qualcomm:snapdragon_ar1_gen_1_platform_firmware:-

qualcomm:snapdragon_x55_5g_modem-rf_system_firmware:-

qualcomm:snapdragon_xr2_5g_platform_firmware:-

qualcomm:snapdragon_xr2\+_gen_1_platform_firmware:-

qualcomm:wcd9370_firmware:-

qualcomm:wcd9375_firmware:-

qualcomm:wcd9380_firmware:-

qualcomm:wcd9385_firmware:-

qualcomm:wcd9390_firmware:-

qualcomm:wcd9395_firmware:-

qualcomm:wcn3950_firmware:-

qualcomm:wcn3988_firmware:-

qualcomm:wcn7760_firmware:-

qualcomm:wcn7860_firmware:-

qualcomm:wcn7861_firmware:-

qualcomm:wcn7880_firmware:-

qualcomm:wcn7881_firmware:-

qualcomm:wsa8810_firmware:-

📊 CVSS Score

8.8

/ 10.0 — High

📊 CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack VectorL — Low / Local

Attack ComplexityL — Low / Local

Privileges RequiredL — Low / Local

User InteractionN — None / Network

ScopeC — Changed

ConfidentialityH — High

IntegrityH — High

AvailabilityH — High

📋 Quick Facts

Severity High

CVSS Score8.8

CWECWE-120

EPSS0.01%

Exploit No

Patch ✗ No

Published 2026-06-01

Source Feed nvd

🇸🇦 Saudi Risk Score

9.0

/ 10.0 — Saudi Risk

Priority: HIGH

🏷️ Tags

CWE-120

🏢 Vendor Advisories

🔗 https://docs.qualcomm.com/product/publicresources/se...

⚡ Actions

🔗 NVD Official Page ⚡ Exploit-DB Search 🐙 GitHub PoC Search 🎯 MITRE ATT&CK 📊 CVE Details

CVE-2026-25277

Introduce Yourself

Sign In Required