PT-2026-22651 · Qualcomm · Snapdragon+28

Published 2026-03-02 · Updated 2026-05-18 · CVE-2025-59603

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions versions prior to 2025 (affected versions not specified)

Description A memory corruption issue exists when processing invalid user addresses with nonstandard buffer addresses. This can lead to unexpected behavior or potentially allow for malicious code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2025-59603

Affected Products

Snapdragon

Cologne Firmware

Fastconnect 6900 Firmware

Fastconnect 7800 Firmware

Qca0000 Firmware

Sc8380Xp Firmware

Sd865 5G Firmware

Snapdragon Xr2+ Gen 1 Platform Firmware

Snapdragon Xr2 5G Platform Firmware

Sxr2230P Firmware

Sxr2250P Firmware

Wcd9378 Firmware

Wcd9380 Firmware

Wcd9385 Firmware

Wsa8810 Firmware

Wsa8815 Firmware

Wsa8830 Firmware

Wsa8832 Firmware

Wsa8835 Firmware

Wsa8840 Firmware

Wsa8845 Firmware

X2000077 Firmware

X2000086 Firmware

X2000090 Firmware

X2000092 Firmware

X2000094 Firmware

Xg101002 Firmware

Xg101032 Firmware

Xg101039 Firmware

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-59603 · Security Note
• https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2026-bulletin.html · Vendor Advisory
• https://twitter.com/CVEnew/status/2028523494829432912 · Twitter Post
• https://twitter.com/cracbot/status/2029874877247992022 · Twitter Post
• https://reddit.com/r/Surface/comments/1tgfhlw/sl7_firmware_update_may_2026 · Reddit Post
• https://t.me/cveNotify/154134 · Telegram Post
• https://t.me/CVEtracker/46127 · Telegram Post
• https://twitter.com/cracbot/status/2029512415529062698 · Twitter Post