CVE-2026-57537

Undergoing Analysis Undergoing Analysis - In Progress

Memory Corruption in Qualcomm Geographic Mapping System

Publication date: 2026-10-06

Last updated on: 2026-10-09

Assigner: Qualcomm, Inc.

Description

Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-09

Generated

2026-10-19

AI Q&A

2026-10-06

EPSS Evaluated

2026-10-18

NVD

CVE-2026-57537

EUVD

EUVD-2026-92979

Affected Vendors & Products

Vendor	Product	Version / Range
qualcomm	congo_firmware	*
qualcomm	fastconnect_6200_firmware	*
qualcomm	fastconnect_6900_firmware	*
qualcomm	fastconnect_7800_firmware	*
qualcomm	orne_firmware	*
qualcomm	pandeiro_firmware	*
qualcomm	qca6595au_firmware	*
qualcomm	qca6698aq_firmware	*
qualcomm	qca6797aq_firmware	*
qualcomm	qca8695au_firmware	*
qualcomm	qcm8838_firmware	*
qualcomm	qln1083bd_firmware	*
qualcomm	qln1086bd_firmware	*
qualcomm	qmp1000_firmware	*
qualcomm	qmp2001_firmware	*
qualcomm	qpa1083bd_firmware	*
qualcomm	qpa1086bd_firmware	*
qualcomm	fastconnect_8800_mobile_connectivity_system_firmware	*
qualcomm	qxm1083_firmware	*
qualcomm	qxm1086_firmware	*
qualcomm	qxm1093_firmware	*
qualcomm	qxm1094_firmware	*
qualcomm	qxm1095_firmware	*
qualcomm	qxm1096_firmware	*
qualcomm	sar1165p_firmware	*
qualcomm	sc8380xp_firmware	*
qualcomm	sdr753_firmware	*
qualcomm	sm4875_firmware	*
qualcomm	sm6850_firmware	*
qualcomm	sm8845p_firmware	*
qualcomm	sm8950_firmware	*
qualcomm	sm8950p_firmware	*
qualcomm	sm8975_firmware	*
qualcomm	sm8975p_firmware	*
qualcomm	snapdragon_460_mobile_platform_firmware	*
qualcomm	snapdragon_662_mobile_platform_firmware	*
qualcomm	snapdragon_8_elite_gen_5_firmware	*
qualcomm	snapdragon_8_gen_5_firmware	*
qualcomm	snapdragon_ar1_gen_1_platform_firmware	*
qualcomm	snapdragon_ar1+_gen_1_platform_firmware	*
qualcomm	snapdragon_ride_elite_firmware	*
qualcomm	snapdragon_cockpit_elite_firmware	*
qualcomm	snapdragon_reality_elite_platform_firmware	*
qualcomm	snapdragon_wear_elite_platform_firmware	*
qualcomm	sxr2230p_firmware	*
qualcomm	themisto_firmware	*
qualcomm	wcd9370_firmware	*
qualcomm	wcd9375_firmware	*
qualcomm	wcd9378_firmware	*
qualcomm	wcd9380_firmware	*
qualcomm	wcd9385_firmware	*
qualcomm	wcd9395_firmware	*
qualcomm	wcn3950_firmware	*
qualcomm	wcn3988_firmware	*
qualcomm	wcn6450_firmware	*
qualcomm	wcn7760_firmware	*
qualcomm	wcn7860_firmware	*
qualcomm	wcn7861_firmware	*
qualcomm	wcn7880_firmware	*
qualcomm	wcn7881_firmware	*
qualcomm	wcn8841_firmware	*
qualcomm	wsa8830_firmware	*
qualcomm	wsa8832_firmware	*
qualcomm	wsa8835_firmware	*
qualcomm	wsa8840_firmware	*
qualcomm	wsa8845_firmware	*
qualcomm	wsa8845h_firmware	*
qualcomm	wsa8850_firmware	*
qualcomm	wsa8850w_firmware	*
qualcomm	wsa8855c_firmware	*
qualcomm	xrv7209_firmware	*
qualcomm	xrv9209_firmware	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-416	The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Attack-Flow Graph

Executive Summary

This is a memory corruption vulnerability in Qualcomm Snapdragon devices where concurrent access and modification of geographic mapping data without proper synchronization can lead to memory corruption.

Detection Guidance

This vulnerability involves memory corruption in geographic mapping data due to lack of synchronization. Detection requires analyzing memory access patterns and synchronization mechanisms in the affected Qualcomm Snapdragon components. Use memory debugging tools like AddressSanitizer or Valgrind to monitor concurrent access. Check for race conditions in mapping data operations using system monitoring tools.

Impact Analysis

It may allow attackers to execute arbitrary code, crash the system, or gain elevated privileges on affected devices, potentially leading to data theft or device compromise.

Compliance Impact

This vulnerability could lead to unauthorized memory access or corruption during geographic data operations, potentially exposing sensitive location or user data. Such data breaches may violate GDPR's data protection requirements or HIPAA's safeguards for protected health information if the affected system processes such data.

Mitigation Strategies

Apply vendor patches or updates for Snapdragon devices to address memory corruption in geographic mapping data handling. Ensure proper synchronization mechanisms are implemented during concurrent access and modifications.

Hi! I’m here to help you understand CVE-2026-57537. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70