CVE Catalog
CVE-2026-25289
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.12%
2th percentile - higher than 2% of all known CVEs
Summary
Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.
Risk Assessment
The risk includes potential system crash or remote code execution in the context of the vulnerable component, which could lead to compromise of device integrity and availability.
Recommendation
It is recommended to apply vendor-provided patches and monitor vulnerability advisories for the affected component.
Original NVD description (English source)
Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.