Vulnerability Report

CVE-2026-25262

Title: Memory Corruption in Primary Bootloader via Crafted ELF File

Memory Corruption

Proof Of Concept

PoC Available for CVE-2026-25262

CWE Category CWE-123
Published Date Sep 22, 2026
Modified Date Sep 22, 2026
Exploit Status Available
Score 6.9 CVSS v3.1
Exploit Probability (EPSS)
0.22%

Vulnerability Summary

CVE-2026-25262: Memory corruption while processing a crafted ELF file in the Primary Bootloader.

Impacted Vendors

Analysis in Progress...

Reference Links

https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2026-bulletin.html
CVSS v3.1
Source Entity [email protected]
Severity MEDIUM
6.9
Attack Vector
PHYSICAL
Complexity
HIGH
Privileges
N/A
Interaction
REQUIRED
Confidentiality
N/A
Integrity
N/A
Availability
N/A
Scope
CHANGED
RAW VECTOR CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2026-25262 Exploits & PoCs (Proof Of Concept)

GitHub https://github.com/shurikgo/cve-2026-25262-sm8450-research
View Code
GitHub https://github.com/therealfraudman/cve-2026-25262-msm8909-PoC
View Code
MODIFIED

Vulnerability data updated via NVD.

MODIFIED

Vulnerability data updated via NVD.

MODIFIED

Vulnerability data updated via NVD.

Attack Vector Matrix

Access Vector PHYSICAL
Complexity HIGH
Privileges N/A
Interaction REQUIRED
CVSS Vector String CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Affected Stack

No specific products linked.