Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-25278

Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive Software platform based on QNX

Description

Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Qualcomm, Inc. Snapdragon

Default version status: unaffected

  • LeMans_AU_LGITaffected
  • LeMansAUaffected
  • QAM8255Paffected
  • QAM8295Paffected
  • QAM8620Paffected
  • QAMSRV1Haffected
  • QAMSRV1Maffected
  • QCA6574AUaffected
  • QCA6595affected
  • QCA6595AUaffected
  • QCA6688AQaffected
  • QCA6696affected
  • QCA6698AQaffected
  • QCA6797AQaffected
  • QCA8695AUaffected
  • SA6155Paffected
  • SA7255Paffected
  • SA7775Paffected
  • SA8155Paffected
  • SA8195Paffected
  • SA8255Paffected
  • SA8295Paffected
  • SA8540Paffected
  • SA8620Paffected
  • SA8770Paffected
  • SA9000Paffected
  • SRV1Haffected
  • SRV1Laffected
  • SRV1Maffected

References