Skip to main content

Fastconnect 6700 Firmware CVE-2025-59600

HIGH
Buffer Over-read (CWE-126)
2026-03-02 product-security@qualcomm.com
Memory Corruption Fastconnect 6700 Firmware Qmp1000 Firmware Fastconnect 6200 Firmware Wcd9378 Firmware Sc8380xp Firmware Snapdragon 4 Gen 1 Mobile Platform Firmware Csra6640 Firmware Sa6155p Firmware Mdm9628 Firmware Sxr2230p Firmware Sa8255p Firmware Qamsrv1h Firmware Qca6595au Firmware Qca6696 Firmware Snapdragon 685 4g Mobile Platform Firmware Video Collaboration Vc3 Platform Firmware Qca6574 Firmware Sm7675p Firmware Lemans Au Lgit Firmware Qca6595 Firmware Qcn9024 Firmware Qcn6024 Firmware Themisto Firmware Wcn6755 Firmware Qcm6125 Firmware Sa8620p Firmware Qca6688aq Firmware Qcm5430 Firmware Sxr2350p Firmware Qpa1083bd Firmware Sa8770p Firmware Iq 8300 Firmware Video Collaboration Vc5 Platform Firmware Snapdragon 460 Mobile Platform Firmware Qcm6490 Firmware Wcn6450 Firmware Sar1250p Firmware Qln1083bd Firmware Iq 8275 Firmware Qca6174a Firmware Sw5100p Firmware Wcd9395 Firmware Snapdragon 6 Gen 3 Mobile Platform Firmware Snapdragon 8 Gen 3 Mobile Platform Firmware Wsa8845h Firmware Fastconnect 6900 Firmware Qcs8550 Firmware Smart Audio 400 Platform Firmware Csra6620 Firmware Sxr2250p Firmware Sa8145p Firmware Wcd9380 Firmware Sa9000p Firmware Qcs4290 Firmware Qcm4490 Firmware Qxm1094 Firmware Pandeiro Firmware Sm7635p Firmware Qamsrv1m Firmware Sd662 Firmware G2 Gen 1 Firmware Sm7435 Firmware Sm6225p Firmware Monaco Iot Firmware Sw6100p Firmware Wsa8810 Firmware Sa6150p Firmware Snapdragon 4 Gen 2 Mobile Platform Firmware Orne Firmware Qpa1086bd Firmware Qcs4490 Firmware Qca6574au Firmware Wcd9335 Firmware Qca6564au Firmware Qxm1096 Firmware Wsa8815 Firmware Sdx61 Firmware Wcd9370 Firmware Qcs2290 Firmware Qcm2290 Firmware Sa7775p Firmware Sxr2330p Firmware Wcn3988 Firmware Wcn7880 Firmware Qca8337 Firmware Sa8150p Firmware Qcn9011 Firmware Qca8081 Firmware Snapdragon 8 Elite Gen 5 Firmware Wcn3910 Firmware Sar2230p Firmware Wsa8830 Firmware Sm8650q Firmware Sa8155p Firmware Sa4155p Firmware Qxm1083 Firmware Wcd9375 Firmware Wcn6650 Firmware Sa6145p Firmware Wcd9385 Firmware Wsa8840 Firmware Snapdragon Ar1 Gen 1 Platform Firmware Iq 9100 Firmware Sa7255p Firmware Qca6574a Firmware Wcn3950 Firmware Sw5100 Firmware Netrani Firmware Qcn9012 Firmware Snapdragon 480 5g Mobile Platform Firmware Palawan25 Firmware Qca6564a Firmware Ar8035 Firmware Sar2130p Firmware Qxm1093 Firmware Wcn7881 Firmware Sm8635p Firmware Sm6650p Firmware Fastconnect 7800 Firmware Ar8031 Firmware Snapdragon X65 5g Modem Rf System Firmware Srv1m Firmware Snapdragon 6 Gen 1 Mobile Platform Firmware Sm8750p Firmware Sa4150p Firmware Snapdragon Xr2 5g Platform Firmware Snapdragon 695 5g Mobile Platform Firmware Snapdragon 8 Elite Firmware Wcn7861 Firmware Qxm1086 Firmware Video Collaboration Vc1 Platform Firmware Wcn3980 Firmware Qln1086bd Firmware Sar1165p Firmware Qxm1095 Firmware Wcn7860 Firmware Sm8635 Firmware Sw6100 Firmware Wsa8845 Firmware Sd865 5g Firmware Snapdragon 7s Gen 3 Mobile Platform Firmware Qca6698aq Firmware Iq 615 Firmware Snapdragon 6 Gen 4 Mobile Platform Firmware Snapdragon 680 4g Mobile Platform Firmware Snapdragon 662 Mobile Platform Firmware Lemansau Firmware Qca2066 Firmware Qca6391 Firmware Wcd9390 Firmware Sa8195p Firmware Milos Firmware Wsa8835 Firmware G1 Gen 1 Firmware Qam8255p Firmware Srv1h Firmware Qcm4325 Firmware Sm7675 Firmware Iq 9075 Firmware Wsa8832 Firmware
7.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

3
Analysis Generated
Mar 12, 2026 - 21:55 vuln.today
Patch released
Mar 03, 2026 - 21:01 nvd
Patch available
CVE Published
Mar 02, 2026 - 17:16 nvd
HIGH 7.8

DescriptionCVE.org

Memory Corruption when adding user-supplied data without checking available buffer space.

AnalysisAI

Memory Corruption when adding user-supplied data without checking available buffer space. [CVSS 7.8 HIGH]

Technical ContextAI

Classified as CWE-126 (Buffer Over-read). Affects Fastconnect 6200 Firmware. Memory Corruption when adding user-supplied data without checking available buffer space.

RemediationAI

A vendor patch is available — apply it immediately.

CVE-2025-21480 HIGH
8.6 Jun 03

Qualcomm GPU micronode contains a memory corruption vulnerability (CVE-2025-21480, CVSS 8.6) caused by unauthorized comm

CVE-2025-21479 HIGH
8.6 Jun 03

A second Qualcomm GPU micronode memory corruption vulnerability (CVE-2025-21479, CVSS 8.6) exists in the unauthorized co

CVE-2026-21385 HIGH POC
7.8 Mar 02

A Qualcomm chipset vulnerability (CVE-2026-21385) causes memory corruption through improper integer handling during memo

CVE-2023-33025 CRITICAL
9.8 Jan 02

Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call. Rated critical severity (CVSS 9.8), t

CVE-2024-21480 CRITICAL
9.8 May 06

Memory corruption while playing audio file having large-sized input buffer. Rated critical severity (CVSS 9.8), this vul

CVE-2024-21463 CRITICAL
9.8 Apr 01

Memory corruption while processing Codec2 during v13k decoder pitch synthesis. Rated critical severity (CVSS 9.8), this

CVE-2023-22388 CRITICAL
9.8 Nov 07

Memory Corruption in Multi-mode Call Processor while processing bit mask API. Rated critical severity (CVSS 9.8), this v

CVE-2023-24855 CRITICAL
9.8 Oct 03

Memory corruption in Modem while processing security related configuration before AS Security Exchange. Rated critical s

CVE-2023-22385 CRITICAL
9.8 Oct 03

Memory Corruption in Data Modem while making a MO call or MT VOLTE call. Rated critical severity (CVSS 9.8), this vulner

CVE-2023-21631 CRITICAL
9.8 Jul 04

Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received

CVE-2023-33030 CRITICAL
9.3 Jan 02

Memory corruption in HLOS while running playready use-case. Rated critical severity (CVSS 9.3), this vulnerability is no

CVE-2025-21450 CRITICAL
9.1 Jul 08

Cryptographic issue occurs due to use of insecure connection method while downloading.

Share

CVE-2025-59600 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy