Improper Release of Memory Before Removing Last Reference in Graphics
Published Feb 2, 2026
7.8
HIGHCVSS 3.1
EPSS 0.11%
Description
Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.
Affected products
-
Affected
- FastConnect 6200
- FastConnect 6700
- FastConnect 6900
- FastConnect 7800
- Flight RB5 5G Platform
- G1 Gen 1
- G2 Gen 1
- IQ10 Series
- IQ6 Series Platform
- IQ8 Series Platform
- IQ9 Series Platform
- Kalpeni
- LeMansAU
- LeMans_AU_LGIT
- Milos
- Milos_IOT
- Monaco_IOT
- Orne
- Palawan25
- Pandeiro
- QAM8255P
- QAM8295P
- QAM8397P
- QAM8620P
- QAM8797P
- QAMSRV1H
- QAMSRV1M
- QCA6391
- QCA6574
- QCA6574A
- QCA6574AU
- QCA6595
- QCA6595AU
- QCA6678AQ
- QCA6688AQ
- QCA6696
- QCA6698AQ
- QCA6698AU
- QCA6797AQ
- QCA8695AU
- QCM2290
- QCM4325
- QCM4490
- QCM5430
- QCM6125
- QCM6490
- QCM8550
- QCM8838
- QCN9011
- QCN9012
- QCN9274
- QCS2290
- QCS4290
- QCS4490
- QCS6690
- QCS8550
- QLN1083BD
- QLN1086BD
- QMB415
- QMB715
- QMP1000
- QPA1083BD
- QPA1086BD
- QRB5165N
- QXM1093
- QXM1094
- QXM1095
- QXM1096
- Qualcomm Video Collaboration VC1 Platform
- Qualcomm Video Collaboration VC3 Platform
- Qualcomm Video Collaboration VC5 Platform
- Robotics RB5 Platform
- SA6155P
- SA7255P
- SA7775P
- SA8155P
- SA8195P
- SA8255P
- SA8295P
- SA8620P
- SA8770P
- SA9000P
- SAR1250P
- SAR2130P
- SAR2230P
- SD 8 Gen1 5G
- SD662
- SD865 5G
- SDR753
- SM6225P
- SM6650P
- SM7635P
- SM7675
- SM7675P
- SM8550P
- SM8635
- SM8635P
- SM8650Q
- SM8750P
- SRV1H
- SRV1L
- SRV1M
- SSG2115P
- SSG2125P
- SW5100
- SW5100P
- SW6100
- SW6100P
- SXR1230P
- SXR2230P
- SXR2250P
- SXR2330P
- SXR2350P
- Snapdragon 4 Gen 1 Mobile Platform
- Snapdragon 4 Gen 2 Mobile Platform
- Snapdragon 460 Mobile Platform
- Snapdragon 480 5G Mobile Platform
- Snapdragon 480+ 5G Mobile Platform
- Snapdragon 6 Gen 4 Mobile Platform
- Snapdragon 662 Mobile Platform
- Snapdragon 680 4G Mobile Platform
- Snapdragon 685 4G Mobile Platform
- Snapdragon 695 5G Mobile Platform
- Snapdragon 7 Gen 4 Mobile Platform
- Snapdragon 7s Gen 3 Mobile Platform
- Snapdragon 8 Elite
- Snapdragon 8 Elite Gen 5
- Snapdragon 8 Gen 1 Mobile Platform
- Snapdragon 8 Gen 2 Mobile Platform
- Snapdragon 8 Gen 3 Mobile Platform
- Snapdragon 8+ Gen 1 Mobile Platform
- Snapdragon 8+ Gen 2 Mobile Platform
- Snapdragon AR1 Gen 1 Platform
- Snapdragon W5+ Gen 1 Wearable Platform
- Snapdragon XR2 5G Platform
- Snapdragon XR2+ Gen 1 Platform
- TalynPlus
- Themisto
- Vision Intelligence 400 Platform
- WCD9335
- WCD9341
- WCD9370
- WCD9375
- WCD9378
- WCD9380
- WCD9385
- WCD9390
- WCD9395
- WCN3910
- WCN3950
- WCN3980
- WCN3988
- WCN3990
- WCN6450
- WCN6650
- WCN6755
- WCN7860
- WCN7861
- WCN7880
- WCN7881
- WSA8810
- WSA8815
- WSA8830
- WSA8832
- WSA8835
- WSA8840
- WSA8845
- WSA8845H
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| Qualcomm, Inc. | Snapdragon | unaffected | Affected
|
Configuration 1
- n/a
Configuration 2
- n/a
Running on/with
- n/a
Configuration 3
- n/a
Running on/with
- n/a
Configuration 4
- n/a
Running on/with
- n/a
Configuration 5
- n/a
Configuration 6
- n/a
Configuration 7
- n/a
Running on/with
- n/a
Configuration 8
- n/a
Configuration 9
- n/a
Configuration 10
- n/a
Running on/with
- n/a
Configuration 11
- n/a
Configuration 12
- n/a
Configuration 13
- n/a
Configuration 14
- n/a
Configuration 15
- n/a
Configuration 16
- n/a
Configuration 17
- n/a
Configuration 18
- n/a
Configuration 19
- n/a
Configuration 20
- n/a
Configuration 21
- n/a
Configuration 22
- n/a
Configuration 23
- n/a
Configuration 24
- n/a
Configuration 25
- n/a
Configuration 26
- n/a
Configuration 27
- n/a
Configuration 28
- n/a
Configuration 29
- n/a
Configuration 30
- n/a
Configuration 31
- n/a
Configuration 32
- n/a
Configuration 33
- n/a
Configuration 34
- n/a
Configuration 35
- n/a
Configuration 36
- n/a
Configuration 37
- n/a
Configuration 38
- n/a
Configuration 39
- n/a
Configuration 40
- n/a
Configuration 41
- n/a
Configuration 42
- n/a
Configuration 43
- n/a
Configuration 44
- n/a
Configuration 45
- n/a
Configuration 46
- n/a
Configuration 47
- n/a
Configuration 48
- n/a
Configuration 49
- n/a
Configuration 50
- n/a
Configuration 51
- n/a
Configuration 52
- n/a
Configuration 53
- n/a
Running on/with
- n/a
Configuration 54
- n/a
Running on/with
- n/a
Configuration 55
- n/a
Configuration 56
- n/a
Configuration 57
- n/a
Configuration 58
- n/a
Configuration 59
- n/a
Configuration 60
- n/a
Configuration 61
- n/a
Configuration 62
- n/a
Configuration 63
- n/a
Configuration 64
- n/a
Configuration 65
- n/a
Configuration 66
- n/a
Configuration 67
- n/a
Configuration 68
- n/a
Configuration 69
- n/a
Configuration 70
- n/a
Running on/with
- n/a
Configuration 71
- n/a
Running on/with
- n/a
Configuration 72
- n/a
Running on/with
- n/a
Configuration 73
- n/a
Running on/with
- n/a
Configuration 74
- n/a
Configuration 75
- n/a
Configuration 76
- n/a
Configuration 77
- n/a
Configuration 78
- n/a
Configuration 79
- n/a
Configuration 80
- n/a
Configuration 81
- n/a
Configuration 82
- n/a
Configuration 83
- n/a
Configuration 84
- n/a
Configuration 85
- n/a
Running on/with
- n/a
Configuration 86
- n/a
Configuration 87
- n/a
Configuration 88
- n/a
Configuration 89
- n/a
Configuration 90
- n/a
Configuration 91
- n/a
Configuration 92
- n/a
Configuration 93
- n/a
Configuration 94
- n/a
Configuration 95
- n/a
Configuration 96
- n/a
Configuration 97
- n/a
Configuration 98
- n/a
Configuration 99
- n/a
Configuration 100
- n/a
Configuration 101
- n/a
Running on/with
- n/a
Configuration 102
Running on/with
- n/a
Configuration 103
Running on/with
- n/a
Configuration 104
- n/a
Running on/with
- n/a
Configuration 105
Running on/with
- n/a
Configuration 106
Running on/with
- n/a
Configuration 107
Running on/with
- n/a
Configuration 108
Running on/with
- n/a
Configuration 109
Running on/with
- n/a
Configuration 110
- n/a
Running on/with
- n/a
Configuration 111
Running on/with
- n/a
Configuration 112
Running on/with
- n/a
Configuration 113
Running on/with
- n/a
Configuration 114
Running on/with
- n/a
Configuration 115
Running on/with
- n/a
Configuration 116
Running on/with
- n/a
Configuration 117
- n/a
Running on/with
- n/a
Configuration 118
Running on/with
- n/a
Configuration 119
Running on/with
- n/a
Configuration 120
Running on/with
- n/a
Configuration 121
- n/a
Configuration 122
- n/a
Configuration 123
- n/a
Configuration 124
- n/a
Configuration 125
- n/a
Configuration 126
- n/a
Configuration 127
- n/a
Configuration 128
- n/a
Configuration 129
- n/a
Configuration 130
- n/a
Configuration 131
- n/a
Configuration 132
- n/a
Configuration 133
- n/a
Configuration 134
- n/a
Configuration 135
- n/a
Configuration 136
- n/a
Configuration 137
- n/a
Configuration 138
- n/a
Configuration 139
Running on/with
- n/a
Configuration 140
- n/a
Running on/with
- n/a
Configuration 141
Running on/with
- n/a
Configuration 142
Running on/with
- n/a
Configuration 143
- n/a
Configuration 144
- n/a
Configuration 145
- n/a
Configuration 146
- n/a
Configuration 147
- n/a
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (2)
- https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2026-bulletin.html PatchVendor Advisory
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-206609 Advisory
| Link | Providers | Tags |
|---|---|---|
| https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2026-bulletin.html | PatchVendor Advisory | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-206609 | Advisory |
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
Red Hat
No data
GitHub
No data