Skip to main content

Boteraser | Website and Server Security Solutions

🛡️ CVE-2026-25288 — cologne-firmware

🟠 CVSS 7.4 — High ✅ No Known Exploit CWE-126 NVD
7.4
CVSS Score
0 Low4 Medium7 High9 Critical10

Description

Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size.

How this vulnerability can be exploited

This issue can be reached from an adjacent network, attack complexity is low, an attacker needs no privileges on the target. No user interaction is required. The scope is changed, meaning a successful attack can affect components beyond the vulnerable one. Rated impact: confidentiality none, integrity none, availability high.

CVSS metrics in full

The score comes from this vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

  • Attack vector: Adjacent network — the attacker has to sit on the same local or logical network.
  • Attack complexity: Low — the attack works reliably, with no preparation.
  • Privileges required: None — an unauthenticated stranger can try it.
  • User interaction: None — nobody has to be tricked into anything.
  • Scope: Changed — a successful attack reaches components beyond the vulnerable one.
  • Confidentiality impact: None.
  • Integrity impact: None.
  • Availability impact: High — total loss, or loss the attacker controls.

Weakness class

CVE-2026-25288 is classified as CWE-126: Buffer Over-read. The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

Affected software

CVE-2026-25288 is recorded against 54 packages.

  • cologne-firmware
  • cq7790-firmware
  • fastconnect-6900-firmware
  • fastconnect-7800-firmware
  • molokai-firmware
  • orne-firmware
  • palawan25-firmware
  • pandeiro-firmware
  • qln1083bd-firmware
  • qln1086bd-firmware
  • qmb715-firmware
  • qmp1000-firmware
  • qmp2001-firmware
  • qpa1083bd-firmware
  • qpa1086bd-firmware
  • qxm1093-firmware
  • qxm1094-firmware
  • qxm1095-firmware
  • qxm1096-firmware
  • sc8380xp-firmware
  • sm6850-firmware
  • sm8735p-firmware
  • sm8845p-firmware
  • snapdragon-7-gen-4-mobile-platform-firmware
Show the remaining 30 packages
  • snapdragon-8-elite-gen-5-firmware
  • wcd9370-firmware
  • wcd9378-firmware
  • wcd9378c-firmware
  • wcd9380-firmware
  • wcd9385-firmware
  • wcd9395-firmware
  • wcn6450-firmware
  • wcn6755-firmware
  • wcn7760-firmware
  • wcn7860-firmware
  • wcn7861-firmware
  • wcn7880-firmware
  • wcn7881-firmware
  • wsa8840-firmware
  • wsa8845-firmware
  • wsa8845h-firmware
  • wsa8850-firmware
  • wsa8850w-firmware
  • wsa8855c-firmware
  • x2000077-firmware
  • x2000086-firmware
  • x2000090-firmware
  • x2000092-firmware
  • x2000094-firmware
  • xg101002-firmware
  • xg101032-firmware
  • xg101039-firmware
  • xrv7209-firmware
  • xrv9209-firmware

Timeline and source

Published on 4 August 2026 and last revised on 6 August 2026. No public exploit is currently recorded for this entry. Record sourced from NVD.

References

docs.qualcomm.com

Other advisories for this package

cologne-firmware has other advisories on record. If you are patching this one, these are worth checking on the same host:

Same weakness in other software

These advisories are the same class of weakness (CWE-126: Buffer Over-read) in other software:

Details

Severity HIGH
CVSS Score 7.4
CVSS Vector CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CWE CWE-126
Public Exploit ✅ No
Source NVD
Published 2026-08-04
Updated 2026-08-20
Modified 2026-08-06
Fix URL N/A

Affected Packages

Software From version Fixed in
cologne-firmware
cq7790-firmware
fastconnect-6900-firmware
fastconnect-7800-firmware
molokai-firmware
orne-firmware
palawan25-firmware
pandeiro-firmware
qln1083bd-firmware
qln1086bd-firmware
qmb715-firmware
qmp1000-firmware
qmp2001-firmware
qpa1083bd-firmware
qpa1086bd-firmware
qxm1093-firmware
qxm1094-firmware
qxm1095-firmware
qxm1096-firmware
sc8380xp-firmware
sm6850-firmware
sm8735p-firmware
sm8845p-firmware
snapdragon-7-gen-4-mobile-platform-firmware
snapdragon-8-elite-gen-5-firmware
wcd9370-firmware
wcd9378-firmware
wcd9378c-firmware
wcd9380-firmware
wcd9385-firmware
wcd9395-firmware
wcn6450-firmware
wcn6755-firmware
wcn7760-firmware
wcn7860-firmware
wcn7861-firmware
wcn7880-firmware
wcn7881-firmware
wsa8840-firmware
wsa8845-firmware
wsa8845h-firmware
wsa8850-firmware
wsa8850w-firmware
wsa8855c-firmware
x2000077-firmware
x2000086-firmware
x2000090-firmware
x2000092-firmware
x2000094-firmware
xg101002-firmware
xg101032-firmware
xg101039-firmware
xrv7209-firmware
xrv9209-firmware

Similar Threats

Site Security Check

Is cologne-firmware part of your stack?

CVE-2026-25288 is rated CVSS 7.4 High. BotEraser scans your installation against known CVE records and tells you whether this vulnerability applies to the versions you actually run.

Scan My Site Free →

No credit card required  ·  Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.

Browse related advisories

All advisoriesCVECVE 2026