CVE-2026-25292
High · 7.6CVSS
7.6
EPSS
0.2%
Published
Aug 4, 2026
CISA due date
—
The record
Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-111107 A NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management interface… CWE-1286
- CVE-2026-110675 Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl accept malformed UTF-8 in bare… CWE-1286
- CVE-2026-83728 Improper validation of syntactic correctness of input in Windows Hyper-V allows an… CWE-1286
- CVE-2026-83611 xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and… CWE-1286
- CVE-2026-72916 Mastodon is a free, open-source social network server based on ActivityPub. CWE-1286
- CVE-2026-0931 Denial-of-service vulnerability in M-Files Server versions before 26.5.16015.3 allows an… CWE-1286
- CVE-2026-57026 An Improper Validation of Syntactic Correctness of Input vulnerability in the SIP plugin… CWE-1286
- CVE-2026-55767 Guzzle is an extensible PHP HTTP client. CWE-1286