Critical Qualcomm Chipset Vulnerabilities Enables Remote Code Execution

Qualcomm released a security bulletin addressing multiple severe vulnerabilities across Snapdragon and related platforms, including critical unauthenticated remote code execution flaws (CVE-2026-25254 CVSS 9.8 and CVE-2026-25293 CVSS 9.6) plus several high- and medium-severity issues affecting WLAN, DSP, bootloader, camera, automotive components and more; the bulletin emphasizes that OEMs must deploy patches to protect a wide range of consumer, enterprise, automotive, and smart-home devices and recommends immediate firmware updates and network monitoring.