CVE-2026-25262 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	6.9 MEDIUM	PHYSICAL	HIGH	LOW	CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 3%

Affected Products (NVD)

Vendor	Product	Version
qualcomm	mdm9207_firmware	-
qualcomm	mdm9655_firmware	-
qualcomm	mdm9665_firmware	-
qualcomm	msm8909_firmware	-
qualcomm	msm8916_firmware	-
qualcomm	msm8952_firmware	-
qualcomm	sdx50_firmware	-
qualcomm	mdm9645_firmware	-

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-123 - Write-what-where Condition
Any condition where the attacker has the ability to write an arbitrary value to an arbitrary location, often as the result of a buffer overflow.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2026-bulletin.html