critical9.6
CVE-2026-25289
Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.
Impact
Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qualcomm | Sm7550p Firmware | All versions |
| Qualcomm | Sm7635p Firmware | All versions |
| Qualcomm | Sm7675 Firmware | All versions |
| Qualcomm | Sm7675p Firmware | All versions |
| Qualcomm | Sm8425 Firmware | All versions |
| Qualcomm | Sm8550p Firmware | All versions |
| Qualcomm | Sm8635 Firmware | All versions |
| Qualcomm | Sm8635p Firmware | All versions |
| Qualcomm | Sm8650q Firmware | All versions |
| Qualcomm | Sm8735p Firmware | All versions |
| Qualcomm | Sm8750p Firmware | All versions |
| Qualcomm | Sm8845p Firmware | All versions |