Qualcomm QCA7005: Heap Buffer Overflow Could Allow Arbitrary Code Execution

Zero Day Initiative published an advisory for CVE-2026-25293 in Qualcomm Technologies' QCA7005 chip. The flaw involves processing vendor-specific GreenPhy management messages; Qualcomm has released a fix. Read the Zero Day Initiative advisory.

Overview and technical details

QCA7005 is a Qualcomm Technologies chip used for powerline communication. The heap buffer overflow could allow an attacker to execute arbitrary code on the chip.

Affected systems

Qualcomm Technologies QCA7005 is affected. The advisory says Qualcomm has released a fix, but does not specify the fixed version.

Mechanism and impact

The flaw is in the processing of vendor-specific GreenPhy management messages. User-provided data is not adequately checked for length before being copied into a fixed-size heap buffer. The attacker must have physical access but does not need authentication; successful exploitation could result in arbitrary code execution on the chip.

Remediation and mitigation

1. Assess devices that use the QCA7005 chip.
2. Update QCA7005 using the fix released by Qualcomm and deploy the relevant update. Refer to the Qualcomm May 2026 Security Bulletin for update details.