CVE-2026-21368
Memory Corruption when parsing jpeg commands due to unaccounted extra writes to the buffer during validation checks.
- CVSS 3.1
- 5.3
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L - EPSS
- 0.08% chance of exploitation in the next 30 days; higher than 0% of CVEs (scores of 2026-10-25)
- CWE
- CWE-787
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:fastconnect_6700_firmware
- qualcomm:fastconnect_6900_firmware
- qualcomm:fastconnect_7800_firmware
- qualcomm:g3x_gen_2_firmware
- qualcomm:iq-9075_firmware
- qualcomm:lemans_au_lgit_firmware
- qualcomm:lemansau_firmware
- qualcomm:netrani_firmware
- qualcomm:pandeiro_firmware
- qualcomm:qam8255p_firmware
- qualcomm:qamsrv1h_firmware
- qualcomm:qamsrv1m_firmware
- qualcomm:qca6595_firmware
- qualcomm:qca6595au_firmware
- qualcomm:qca6678aq_firmware
- qualcomm:qca6698aq_firmware
- qualcomm:qca6698au_firmware
- qualcomm:qca6797aq_firmware
- qualcomm:qcm4490_firmware
- qualcomm:qcm8838_firmware
- qualcomm:qcs4490_firmware
- qualcomm:qcs8550_firmware
- qualcomm:qln1083bd_firmware
- qualcomm:qln1086bd_firmware
- qualcomm:qpa1083bd_firmware
- qualcomm:qpa1086bd_firmware
- qualcomm:qxm1093_firmware
- qualcomm:qxm1094_firmware
- qualcomm:qxm1095_firmware
- qualcomm:qxm1096_firmware
- qualcomm:sa7255p_firmware
- qualcomm:sa7775p_firmware
- qualcomm:sa8255p_firmware
- qualcomm:sa8620p_firmware
- qualcomm:sa8770p_firmware
- qualcomm:sa9000p_firmware
- qualcomm:sar2130p_firmware
- qualcomm:sc8380xp_firmware
- qualcomm:sd865_5g_firmware
- qualcomm:sd_8_gen1_5g_firmware
- qualcomm:sdr753_firmware
- qualcomm:sm7435_firmware
- qualcomm:sm7525_firmware
- qualcomm:sm7550_firmware
- qualcomm:sm7550p_firmware
- qualcomm:sm8550p_firmware
- qualcomm:snapdragon_460_mobile_platform_firmware
- qualcomm:snapdragon_4_gen_2_mobile_platform_firmware
- qualcomm:snapdragon_662_mobile_platform_firmware
- qualcomm:snapdragon_6_gen_1_mobile_platform_firmware