CVE-2026-25289

Summary

The flaw involves memory corruption when processing Device Capability Extended attributes in specific NAN Service Discovery Frames with invalid length values, potentially leading to remote code execution.

Exploitability

Exploitation requires precise manipulation of frame lengths and is moderately difficult due to the need for detailed knowledge of the protocol and valid frame structures.

Blast radius

If exploited, this vulnerability could lead to widespread device compromise across affected Qualcomm firmware versions, impacting a broad range of devices.

Prioritized remediation

Update all affected Qualcomm firmware to the latest version immediately to mitigate the risk.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.