Memory Corruption in Qualcomm Chipset Firmware

Publication date: 2026-07-06

Last updated on: 2026-07-06

Assigner: Qualcomm, Inc.

Description

Memory Corruption when handling flash commands due to outdated LED count values being used after userspace modification.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-06

Last Modified

2026-07-06

Generated

2026-07-07

AI Q&A

2026-07-07

EPSS Evaluated

N/A

NVD

CVE-2026-21369

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is a memory corruption issue that occurs when handling flash commands. It happens because outdated LED count values are used after modifications are made from userspace.

Impact Analysis

The vulnerability can lead to memory corruption which may impact confidentiality, integrity, and availability of the affected system. According to the CVSS score, it requires local access with high attack complexity and low privileges, but it can cause partial loss of confidentiality, integrity, and availability.

Hi! I’m here to help you understand CVE-2026-21369. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70