CVE-2026-57546

Undergoing Analysis Undergoing Analysis - In Progress

Transient Denial of Service in Qualcomm Chipset Firmware

Publication date: 2026-10-06

Last updated on: 2026-10-09

Assigner: Qualcomm, Inc.

Description

Transient DOS when processing a continuous receive command with a zero-sized global configuration override.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-09

Generated

2026-10-19

AI Q&A

2026-10-06

EPSS Evaluated

2026-10-18

NVD

CVE-2026-57546

EUVD

EUVD-2026-92981

Affected Vendors & Products

Vendor	Product	Version / Range
qualcomm	congo_firmware	*
qualcomm	fastconnect_7800_firmware	*
qualcomm	orne_firmware	*
qualcomm	pandeiro_firmware	*
qualcomm	fastconnect_8800_mobile_connectivity_system_firmware	*
qualcomm	sm8950_firmware	*
qualcomm	sm8950p_firmware	*
qualcomm	sm8975_firmware	*
qualcomm	sm8975p_firmware	*
qualcomm	wcd9378_firmware	*
qualcomm	wcd9395_firmware	*
qualcomm	wcn7880_firmware	*
qualcomm	wcn7881_firmware	*
qualcomm	wcn8841_firmware	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-126	The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

Attack-Flow Graph

Executive Summary

This vulnerability causes a temporary denial of service (DOS) when a system processes a continuous receive command with a zero-sized global configuration override. This means the system may become unresponsive or crash temporarily while handling such commands.

Detection Guidance

This vulnerability causes a transient denial of service when processing a continuous receive command with a zero-sized global configuration override. Detection requires monitoring for abnormal system behavior during network processing, such as unexpected crashes or hangs when handling continuous receive commands. Check system logs for Qualcomm Snapdragon-related errors or performance degradation during high network traffic.

Impact Analysis

The impact includes system downtime or reduced performance due to temporary service disruptions. It may affect devices using Qualcomm Snapdragon processors, leading to interrupted operations or loss of functionality during the DOS event.

Compliance Impact

This vulnerability causes a transient denial of service (DOS) condition, which could disrupt system availability. For compliance standards like GDPR and HIPAA, which require maintaining data availability and integrity, such disruptions may lead to non-compliance if critical systems are affected.

Mitigation Strategies

Apply vendor patches or updates for Qualcomm Snapdragon devices to address the transient DOS issue with zero-sized global configuration overrides. Monitor network traffic for continuous receive commands that may trigger the vulnerability.

Hi! I’m here to help you understand CVE-2026-57546. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70