Memory Corruption in Qualcomm JPEG Parser

Publication date: 2026-07-06

Last updated on: 2026-07-06

Assigner: Qualcomm, Inc.

Description

Memory Corruption when parsing jpeg commands due to unaccounted extra writes to the buffer during validation checks.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-06

Last Modified

2026-07-06

Generated

2026-07-07

AI Q&A

2026-07-07

EPSS Evaluated

N/A

NVD

CVE-2026-21368

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is a memory corruption issue that occurs when parsing JPEG commands. It happens because there are extra writes to the buffer during validation checks that are not properly accounted for, leading to potential corruption of memory.

Impact Analysis

The vulnerability can impact you by causing memory corruption, which may lead to a range of issues including data integrity problems, application crashes, or potentially allowing an attacker to execute arbitrary code or escalate privileges.

Hi! I’m here to help you understand CVE-2026-21368. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70