CVE-2026-25302
Snapdragon: Improper Verification of Cryptographic Signature in Boot
Qualcomm, Inc. Snapdragon
CVSS
7.1HighExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.06%Chance of exploitation activity in the next 30 days, higher than 0% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Description
Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.
Text from CVE List
Affected versions 30
- Snapdragonaffected: 5G Fixed Wireless Access PlatformCVE List
- Snapdragonaffected: AR8035CVE List
- Snapdragonaffected: CologneCVE List
- Snapdragonaffected: CQ7790CVE List
- Snapdragonaffected: CQ8725SCVE List
- Snapdragonaffected: CQ8750MCVE List
- Snapdragonaffected: CSRA6620CVE List
- Snapdragonaffected: CSRA6640CVE List
- Snapdragonaffected: FastConnect 6200CVE List
- Snapdragonaffected: FastConnect 6700CVE List
- Snapdragonaffected: FastConnect 6800CVE List
- Snapdragonaffected: FastConnect 6900CVE List
- Snapdragonaffected: FastConnect 7800CVE List
- Snapdragonaffected: FWA Gen 3 Ultra PlatformCVE List
- Snapdragonaffected: FWA Gen 5 Elite PlatformCVE List
- Snapdragonaffected: G1 Gen 1CVE List
- Snapdragonaffected: G2 Gen 1CVE List
- Snapdragonaffected: G3x Gen 2CVE List
- Snapdragonaffected: IPQ9048CVE List
- Snapdragonaffected: IPQ9570CVE List
- Snapdragonaffected: IPQ9574CVE List
- Snapdragonaffected: IQ10 SeriesCVE List
- Snapdragonaffected: IQ6 Series PlatformCVE List
- Snapdragonaffected: IQ8 Series PlatformCVE List
- Snapdragonaffected: IQ9 Series PlatformCVE List
- Snapdragonaffected: IQX5121CVE List
- Snapdragonaffected: KalpeniCVE List
- Snapdragonaffected: KobukCVE List
- Snapdragonaffected: LeMans_AU_LGITCVE List
- Snapdragonaffected: LeMansAUCVE List