CVE-2026-25289

A critical memory corruption vulnerability exists in the processing of Device Capability Extended attributes within specific NAN Service Discovery Frames that contain invalid length values. Exploitation of this flaw could allow an attacker to execute arbitrary code, potentially leading to system compromise. Organizations utilizing affected devices should prioritize patching this vulnerability to mitigate the risk of exploitation.