CVE-2026-21372
Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations.
- CVSS 3.1
- 7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- 0.10% chance of exploitation in the next 30 days; higher than 0% of CVEs (scores of 2026-10-25)
- CWE
- CWE-122
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:cologne_firmware
- qualcomm:fastconnect_6700_firmware
- qualcomm:fastconnect_6900_firmware
- qualcomm:fastconnect_7800_firmware
- qualcomm:qcm5430_firmware
- qualcomm:qcm6490_firmware
- qualcomm:snapdragon_460_mobile_platform_firmware
- qualcomm:snapdragon_662_mobile_platform_firmware
- qualcomm:snapdragon_7c\+_gen_3_compute_firmware
- qualcomm:video_collaboration_vc3_platform_firmware
- qualcomm:wcd9370_firmware
- qualcomm:wcd9375_firmware
- qualcomm:wcd9378c_firmware
- qualcomm:wcd9380_firmware
- qualcomm:wcd9385_firmware
- qualcomm:wcn3950_firmware
- qualcomm:wcn3988_firmware
- qualcomm:wsa8840_firmware
- qualcomm:wsa8845_firmware
- qualcomm:wsa8845h_firmware
- qualcomm:x2000077_firmware
- qualcomm:x2000086_firmware
- qualcomm:x2000090_firmware
- qualcomm:x2000092_firmware
- qualcomm:x2000094_firmware
- qualcomm:xg101002_firmware
- qualcomm:xg101032_firmware
- qualcomm:xg101039_firmware