This vulnerability (CVE-2026-25268) involves a stack-based buffer overflow (CWE-121) in Qualcomm Snapdragon products. It occurs due to memory corruption triggered by processing invalid HT40 channel layouts during dynamic channel switching. The issue affects numerous Qualcomm chipsets and modules identified by specific model numbers. The CVSS v3.1 score is 8.8, indicating high severity with attack vector local, low attack complexity, low privileges required, no user interaction, scope changed, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and no known exploits have been reported.

Successful exploitation of this vulnerability could lead to complete compromise of the affected device's confidentiality, integrity, and availability due to stack-based buffer overflow and memory corruption. This could allow an attacker with local access and low privileges to execute arbitrary code or cause denial of service. The scope of impact is changed, meaning the vulnerability affects components beyond the initially vulnerable component.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users and administrators should monitor Qualcomm's advisories for updates. No specific mitigations or workarounds are currently documented.