CVE-2026-57555

Undergoing Analysis Undergoing Analysis - In Progress

Memory Corruption in Qualcomm System Service Routines

Publication date: 2026-10-06

Last updated on: 2026-10-09

Assigner: Qualcomm, Inc.

Description

Memory Corruption when executing system service routines due to improper handling of user input buffers.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-09

Generated

2026-10-19

AI Q&A

2026-10-06

EPSS Evaluated

2026-10-18

NVD

CVE-2026-57555

EUVD

EUVD-2026-92983

Affected Vendors & Products

Vendor	Product	Version / Range
qualcomm	cologne_firmware	*
qualcomm	fastconnect_6700_firmware	*
qualcomm	fastconnect_6900_firmware	*
qualcomm	fastconnect_7800_firmware	*
qualcomm	iqx5121_firmware	*
qualcomm	iqx7181_firmware	*
qualcomm	qca0000_firmware	*
qualcomm	qcm5430_firmware	*
qualcomm	qcm6490_firmware	*
qualcomm	video_collaboration_vc3_platform_firmware	*
qualcomm	sc8380xp_firmware	*
qualcomm	snapdragon_x2_elite_firmware	*
qualcomm	snapdragon_reality_elite_platform_firmware	*
qualcomm	wcd9370_firmware	*
qualcomm	wcd9375_firmware	*
qualcomm	wcd9378c_firmware	*
qualcomm	wcd9380_firmware	*
qualcomm	wcd9385_firmware	*
qualcomm	wsa8835_firmware	*
qualcomm	wsa8840_firmware	*
qualcomm	wsa8845_firmware	*
qualcomm	wsa8845h_firmware	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-416	The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Attack-Flow Graph

Executive Summary

This vulnerability involves memory corruption when system service routines improperly handle user input buffers. This can lead to crashes, data corruption, or arbitrary code execution on affected systems.

Impact Analysis

An attacker could exploit this to gain unauthorized access, execute malicious code, or cause system instability. It may also lead to data breaches or denial of service on devices using Qualcomm Snapdragon processors.

Compliance Impact

This vulnerability could lead to unauthorized data access or loss, violating GDPR (data protection) and HIPAA (health data security) requirements. Organizations may face legal penalties or reputational damage if exploited.

Mitigation Strategies

Apply vendor patches or updates for Qualcomm Snapdragon devices. Disable affected system service routines if patches are unavailable. Monitor Qualcomm security advisories for updates.

Hi! I’m here to help you understand CVE-2026-57555. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70