CVE-2026-25291

Summary

The flaw is a memory corruption vulnerability in Qualcomm's SAR1165P and SC8380XP firmware components that occurs during concurrent operations on shared memory page lists due to insufficient synchronization. This allows an authenticated attacker with local access to potentially execute arbitrary code or cause system instability.

Exploitability

Exploitation requires local authentication and is moderately difficult, needing precise timing of concurrent memory operations to trigger the race condition that leads to memory corruption.

Blast radius

If exploited, this vulnerability could affect Snapdragon 662 mobile platform devices and other Qualcomm-based systems running the affected firmware versions, potentially leading to complete system compromise or denial of service.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to firmware version 2.590 or later for the affected Snapdragon 662 mobile platform and related Qualcomm components.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.