Strix
74.4K

CVE-2026-25302

HIGHCVSS 7.1/10EPSS 0.09%

Last modified

CVE-2026-25302 is a high-severity vulnerability rated 7.1/10 on the CVSS scale. Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.. EPSS estimates a 0.09% chance of exploitation in the next 30 days.

Description

Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.

Metrics

CVSS 3.1
7.1/10

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

EPSS Probability
0.09%

0.4th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
QualcommXrv9209 FirmwareAll versions
QualcommSnapdragon G1 Gen 2 Gaming Platform FirmwareAll versions
QualcommAr8035 FirmwareAll versions
QualcommCologne FirmwareAll versions
QualcommCq2390m FirmwareAll versions
QualcommQmp2001 FirmwareAll versions
QualcommQmx82l FirmwareAll versions
QualcommQmx85l FirmwareAll versions
QualcommQna715 FirmwareAll versions
QualcommQpa1083bd FirmwareAll versions
QualcommQpa1086bd FirmwareAll versions
QualcommQru1032 FirmwareAll versions
QualcommQualcomm Dragonwing Qru100 Platform FirmwareAll versions
QualcommQualcomm Dragonwing X100 Accelerator Card FirmwareAll versions
QualcommVideo Collaboration Vc3 Platform FirmwareAll versions
QualcommVideo Collaboration Vc5 Platform FirmwareAll versions
QualcommQxm1083 FirmwareAll versions
QualcommQxm1086 FirmwareAll versions
QualcommQxm1093 FirmwareAll versions
QualcommQxm1094 FirmwareAll versions
QualcommQxm1095 FirmwareAll versions
QualcommQxm1096 FirmwareAll versions
QualcommRobotics Rb2 Platform FirmwareAll versions
QualcommRobotics Rb5 Platform FirmwareAll versions
QualcommSa510m FirmwareAll versions
QualcommSa7255p FirmwareAll versions
QualcommSa7775p FirmwareAll versions
QualcommSa8255p FirmwareAll versions
QualcommSa8295p FirmwareAll versions
QualcommSa8540p FirmwareAll versions
QualcommSa8620p FirmwareAll versions
QualcommSa8770p FirmwareAll versions
QualcommSa9000p FirmwareAll versions
QualcommSar1165p FirmwareAll versions
QualcommSar2130p FirmwareAll versions
QualcommSc8380xp FirmwareAll versions
QualcommSnapdragon 8 Gen1 5g FirmwareAll versions
QualcommSnapdragon 662 Mobile Platform FirmwareAll versions
QualcommSnapdragon 865 5g Mobile Platform FirmwareAll versions
QualcommSdr753 FirmwareAll versions
QualcommSdx61 FirmwareAll versions
QualcommSdx71m FirmwareAll versions
QualcommSdx81 FirmwareAll versions
QualcommSm4850 FirmwareAll versions
QualcommSm4850p FirmwareAll versions
QualcommWsa8845 FirmwareAll versions
QualcommWsa8845h FirmwareAll versions
QualcommWsa8850 FirmwareAll versions
QualcommWsa8850w FirmwareAll versions
QualcommWsa8855c FirmwareAll versions

Showing 50 of 292 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Analyzed

Frequently Asked Questions

What is CVE-2026-25302?
Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.
How severe is CVE-2026-25302?
CVE-2026-25302 has a CVSS score of 7.1/10 (HIGH severity). The EPSS model estimates a 0.09% probability of exploitation in the next 30 days.
How do I fix CVE-2026-25302?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-25302?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST