Memory Corruption in Qualcomm Chipset Firmware

Publication date: 2026-07-06

Last updated on: 2026-07-07

Assigner: Qualcomm, Inc.

Description

Memory Corruption when allocating memory with sizes that exceed the maximum allowed value.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-06

Last Modified

2026-07-07

Generated

2026-07-27

AI Q&A

2026-07-07

EPSS Evaluated

2026-07-25

NVD

CVE-2026-21379

Affected Vendors & Products

Vendor	Product	Version / Range
qualcomm	aqt1000_firmware	*
qualcomm	cologne_firmware	*
qualcomm	fastconnect_6200_firmware	*
qualcomm	fastconnect_6700_firmware	*
qualcomm	fastconnect_6800_firmware	*
qualcomm	fastconnect_6900_firmware	*
qualcomm	fastconnect_7800_firmware	*
qualcomm	iqx5121_firmware	*
qualcomm	iqx7181_firmware	*
qualcomm	qca0000_firmware	*
qualcomm	qca6391_firmware	*
qualcomm	qca6420_firmware	*
qualcomm	qca6430_firmware	*
qualcomm	qcm5430_firmware	*
qualcomm	qcm6490_firmware	*
qualcomm	video_collaboration_vc3_platform_firmware	*
qualcomm	sc8380xp_firmware	*
qualcomm	snapdragon_7c+_gen_3_compute_firmware	*
qualcomm	snapdragon_8c_compute_platform_firmware	*
qualcomm	snapdragon_8c_compute_platform_(sc8180xp-ad)_firmware	*
qualcomm	snapdragon_8cx_compute_platform_firmware	*
qualcomm	snapdragon_8cx_compute_platform_"poipu_pro"_firmware	*
qualcomm	snapdragon_8cx_gen_2_5g_compute_platform_firmware	*
qualcomm	snapdragon_8cx_gen_2_5g_compute_platform_"poipu_pro"_firmware	*
qualcomm	snapdragon_8cx_gen_3_compute_platform_firmware	*
qualcomm	wcd9340_firmware	*
qualcomm	wcd9341_firmware	*
qualcomm	wcd9370_firmware	*
qualcomm	wcd9375_firmware	*
qualcomm	wcd9378c_firmware	*
qualcomm	wcd9380_firmware	*
qualcomm	wcd9385_firmware	*
qualcomm	wsa8810_firmware	*
qualcomm	wsa8815_firmware	*
qualcomm	wsa8830_firmware	*
qualcomm	wsa8835_firmware	*
qualcomm	wsa8840_firmware	*
qualcomm	wsa8845_firmware	*
qualcomm	wsa8845h_firmware	*
qualcomm	x2000077_firmware	*
qualcomm	x2000086_firmware	*
qualcomm	x2000090_firmware	*
qualcomm	x2000092_firmware	*
qualcomm	x2000094_firmware	*
qualcomm	xg101002_firmware	*
qualcomm	xg101032_firmware	*
qualcomm	xg101039_firmware	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-126	The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is a memory corruption issue that occurs when memory is allocated with sizes that exceed the maximum allowed value.

Impact Analysis

The vulnerability can lead to severe impacts including high confidentiality, integrity, and availability risks, as indicated by its CVSS score. Exploiting this memory corruption could allow an attacker with local low privileges to cause significant damage to the system.

Hi! I’m here to help you understand CVE-2026-21379. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70