CVE-2026-57554
Undergoing Analysis Undergoing Analysis - In Progress

Memory Corruption in Qualcomm FastRPC Performance Counter

Publication date: 2026-10-06

Last updated on: 2026-10-09

Assigner: Qualcomm, Inc.

Description
Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-06
Last Modified
2026-10-09
Generated
2026-10-19
AI Q&A
2026-10-06
EPSS Evaluated
2026-10-18
NVD
CVE-2026-57554
EUVD
EUVD-2026-92982

Affected Vendors & Products

Showing 218 associated CPEs
Vendor Product Version / Range
qualcomm snapdragon_g1_gen_2_gaming_platform_firmware *
qualcomm ar8031_firmware *
qualcomm ar8035_firmware *
qualcomm csra6620_firmware *
qualcomm csra6640_firmware *
qualcomm sm7435p_firmware *
qualcomm sm7525_firmware *
qualcomm sm7550_firmware *
qualcomm sm7550p_firmware *
qualcomm sm7635p_firmware *
qualcomm sm7675_firmware *
qualcomm sm7675p_firmware *
qualcomm sm7750p_firmware *
qualcomm sm8475p_firmware *
qualcomm sm8550p_firmware *
qualcomm sm8635_firmware *
qualcomm sm8635p_firmware *
qualcomm sm8650q_firmware *
qualcomm sm8735p_firmware *
qualcomm sm8750p_firmware *
qualcomm smart_audio_400_platform_firmware *
qualcomm snapdragon_4_gen_1_mobile_platform_firmware *
qualcomm snapdragon_4_gen_2_mobile_platform_firmware *
qualcomm snapdragon_460_mobile_platform_firmware *
qualcomm snapdragon_480_5g_mobile_platform_firmware *
qualcomm snapdragon_480+_5g_mobile_platform_firmware *
qualcomm snapdragon_6_gen_1_mobile_platform_firmware *
qualcomm snapdragon_6_gen_3_mobile_platform_firmware *
qualcomm snapdragon_6_gen_4_mobile_platform_firmware *
qualcomm snapdragon_680_4g_mobile_platform_firmware *
qualcomm snapdragon_685_4g_mobile_platform_firmware *
qualcomm snapdragon_695_5g_mobile_platform_firmware *
qualcomm snapdragon_7_gen_1_mobile_platform_firmware *
qualcomm snapdragon_7_gen_4_mobile_platform_firmware *
qualcomm snapdragon_7+_gen_2_mobile_platform_firmware *
qualcomm snapdragon_778g_5g_mobile_platform_firmware *
qualcomm snapdragon_778g+_5g_mobile_platform_firmware *
qualcomm snapdragon_782g_mobile_platform_firmware *
qualcomm snapdragon_7c+_gen_3_compute_firmware *
qualcomm snapdragon_7s_gen_3_mobile_platform_firmware *
qualcomm snapdragon_8_elite_firmware *
qualcomm snapdragon_8_gen_1_mobile_platform_firmware *
qualcomm snapdragon_8_gen_2_mobile_platform_firmware *
qualcomm snapdragon_8_gen_3_mobile_platform_firmware *
qualcomm snapdragon_8+_gen_1_mobile_platform_firmware *
qualcomm fastconnect_6200_firmware *
qualcomm fastconnect_6700_firmware *
qualcomm fastconnect_6900_firmware *
qualcomm fastconnect_7800_firmware *
qualcomm fwa_gen_3_ultra_firmware *
qualcomm g1_gen_1_firmware *
qualcomm g2_gen_1_firmware *
qualcomm g3x_gen_2_firmware *
qualcomm kalpeni_firmware *
qualcomm lemans_au_lgit_firmware *
qualcomm lemansau_firmware *
qualcomm mbm415_firmware *
qualcomm mbm715_firmware *
qualcomm mdm9250_firmware *
qualcomm mdm9628_firmware *
qualcomm milos_firmware *
qualcomm milos_iot_firmware *
qualcomm netrani_firmware *
qualcomm orne_firmware *
qualcomm palawan25_firmware *
qualcomm pandeiro_firmware *
qualcomm qam8255p_firmware *
qualcomm qam8295p_firmware *
qualcomm qamsrv1h_firmware *
qualcomm qamsrv1m_firmware *
qualcomm qca2066_firmware *
qualcomm qca6174a_firmware *
qualcomm qca6391_firmware *
qualcomm qca6564a_firmware *
qualcomm qca6564au_firmware *
qualcomm qca6574_firmware *
qualcomm qca6574a_firmware *
qualcomm qca6574au_firmware *
qualcomm qca6584au_firmware *
qualcomm qca6595_firmware *
qualcomm qca6595au_firmware *
qualcomm qca6678aq_firmware *
qualcomm qca6688aq_firmware *
qualcomm qca6696_firmware *
qualcomm qca6698aq_firmware *
qualcomm snapdragon_8+_gen_2_mobile_platform_firmware *
qualcomm snapdragon_888_5g_mobile_platform_firmware *
qualcomm snapdragon_888+_5g_mobile_platform_firmware *
qualcomm snapdragon_ar1_gen_1_platform_firmware *
qualcomm snapdragon_ar1+_gen_1_platform_firmware *
qualcomm snapdragon_auto_5g_modem-rf_firmware *
qualcomm snapdragon_auto_5g_modem-rf_gen_2_firmware *
qualcomm snapdragon_w5+_gen_1_wearable_platform_firmware *
qualcomm snapdragon_x12_lte_modem_firmware *
qualcomm snapdragon_x32_5g_modem-rf_system_firmware *
qualcomm snapdragon_x35_5g_modem-rf_system_firmware *
qualcomm snapdragon_x53_5g_modem-rf_system_firmware *
qualcomm snapdragon_x62_5g_modem-rf_system_firmware *
qualcomm snapdragon_x65_5g_modem-rf_system_firmware *
qualcomm snapdragon_x72_5g_modem-rf_system_firmware *
qualcomm snapdragon_x75_5g_modem-rf_system_firmware *
qualcomm snapdragon_reality_elite_platform_firmware *
qualcomm srv1h_firmware *
qualcomm srv1m_firmware *
qualcomm sw5100_firmware *
qualcomm sw5100p_firmware *
qualcomm sxr2230p_firmware *
qualcomm sxr2250p_firmware *
qualcomm wcd9335_firmware *
qualcomm wcd9340_firmware *
qualcomm wcd9370_firmware *
qualcomm wcd9371_firmware *
qualcomm wcd9375_firmware *
qualcomm wcd9378_firmware *
qualcomm wcd9380_firmware *
qualcomm wcd9385_firmware *
qualcomm wcd9390_firmware *
qualcomm wcd9395_firmware *
qualcomm wcn3950_firmware *
qualcomm wcn3980_firmware *
qualcomm wcn3988_firmware *
qualcomm wcn6450_firmware *
qualcomm wcn6650_firmware *
qualcomm wcn6755_firmware *
qualcomm wcn7860_firmware *
qualcomm qca6698au_firmware *
qualcomm qca6797aq_firmware *
qualcomm qca8081_firmware *
qualcomm qca8337_firmware *
qualcomm qca8695au_firmware *
qualcomm qca9377_firmware *
qualcomm qcc710_firmware *
qualcomm qcm2290_firmware *
qualcomm qcm4290_firmware *
qualcomm qcm4325_firmware *
qualcomm qcm4490_firmware *
qualcomm qcm5430_firmware *
qualcomm qcm6125_firmware *
qualcomm qcm6490_firmware *
qualcomm qcn6024_firmware *
qualcomm qcn6224_firmware *
qualcomm qcn6274_firmware *
qualcomm qcn9011_firmware *
qualcomm qcn9012_firmware *
qualcomm qcn9024_firmware *
qualcomm qcs2290_firmware *
qualcomm qcs4290_firmware *
qualcomm qcs4490_firmware *
qualcomm qcs6690_firmware *
qualcomm qcs8550_firmware *
qualcomm qdu1000_firmware *
qualcomm qdu1110_firmware *
qualcomm qdu1210_firmware *
qualcomm qdx1010_firmware *
qualcomm qdx1011_firmware *
qualcomm qep8111_firmware *
qualcomm qfw7114_firmware *
qualcomm qfw7124_firmware *
qualcomm qln1083bd_firmware *
qualcomm qln1086bd_firmware *
qualcomm qmp1000_firmware *
qualcomm qna715_firmware *
qualcomm qpa1083bd_firmware *
qualcomm qpa1086bd_firmware *
qualcomm qru1032_firmware *
qualcomm wcn7861_firmware *
qualcomm wcn7880_firmware *
qualcomm wcn7881_firmware *
qualcomm wsa8810_firmware *
qualcomm wsa8815_firmware *
qualcomm wsa8830_firmware *
qualcomm wsa8832_firmware *
qualcomm wsa8835_firmware *
qualcomm wsa8840_firmware *
qualcomm wsa8845_firmware *
qualcomm wsa8845h_firmware *
qualcomm xrv7209_firmware *
qualcomm xrv9209_firmware *
qualcomm qualcomm_dragonwing_qru100_platform_firmware *
qualcomm qualcomm_dragonwing_x100_accelerator_card_firmware *
qualcomm video_collaboration_vc1_platform_firmware *
qualcomm video_collaboration_vc3_platform_firmware *
qualcomm video_collaboration_vc5_platform_firmware *
qualcomm qxm1083_firmware *
qualcomm qxm1086_firmware *
qualcomm qxm1093_firmware *
qualcomm qxm1094_firmware *
qualcomm qxm1095_firmware *
qualcomm qxm1096_firmware *
qualcomm robotics_rb2_platform_firmware *
qualcomm sa4150p_firmware *
qualcomm sa4155p_firmware *
qualcomm sa6145p_firmware *
qualcomm sa6150p_firmware *
qualcomm sa6155p_firmware *
qualcomm sa7255p_firmware *
qualcomm sa7775p_firmware *
qualcomm sa8145p_firmware *
qualcomm sa8150p_firmware *
qualcomm sa8155p_firmware *
qualcomm sa8195p_firmware *
qualcomm sa8255p_firmware *
qualcomm sa8295p_firmware *
qualcomm sa8620p_firmware *
qualcomm sa8770p_firmware *
qualcomm sa9000p_firmware *
qualcomm sar1165p_firmware *
qualcomm sar2130p_firmware *
qualcomm snapdragon_8_gen1_5g_firmware *
qualcomm snapdragon_662_mobile_platform_firmware *
qualcomm sdx61_firmware *
qualcomm sm6225p_firmware *
qualcomm sm6450p_firmware *
qualcomm sm6475p_firmware *
qualcomm sm6475q_firmware *
qualcomm sm6650p_firmware *
qualcomm sm7325p_firmware *
qualcomm sm7435_firmware *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-416 The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a memory corruption vulnerability where asynchronous threads simultaneously access shared performance counter data during FastRPC invocations. This can lead to unpredictable behavior, crashes, or potential code execution due to corrupted memory states.

Impact Analysis

The vulnerability may cause system instability, crashes, or unauthorized code execution on affected devices using Qualcomm Snapdragon processors. It could lead to data loss, application failures, or compromise of sensitive information.

Compliance Impact

The vulnerability's memory corruption issue could lead to unauthorized access or data breaches, potentially violating GDPR's data integrity and confidentiality requirements or HIPAA's safeguards for protected health information.

Mitigation Strategies

Apply vendor patches or updates for Snapdragon devices. Disable FastRPC if not required. Monitor system logs for memory corruption errors or crashes during performance counter access.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-57554. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart