Review reviewHigh

CVE-2026-25260

Qualcomm, Inc. Snapdragon, cologne firmware, cologne

Memory Corruption when accessing shared buffers without validation of concurrent user-mode input modifications.

PRIORITY ASSESSMENT

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.05%

Technical severityCVSS 7

Memory Corruption when accessing shared buffers without validation of concurrent user-mode input modifications.

Product: Qualcomm, Inc. Snapdragon, cologne firmware, cologne
Affected versions: >= Cologne, >= FastConnect 6900, >= FastConnect 7800, >= QCA0000, >= SC8380XP, >= WCD9378C, >= WCD9380, >= WCD9385, >= WSA8840, >= WSA8845, >= WSA8845H, >= X2000077, >= X2000086, >= X2000090, >= X2000092, >= X2000094, >= XG101002, >= XG101032, >= XG101039
Fixed versions: No verified fixed-version field is available yet

Confirm exposure before applying a vendor-supported change.

1
Identify
Confirm that Qualcomm, Inc. Snapdragon, cologne firmware, cologne and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.