Memory Corruption in Qualcomm Chipset Firmware

Publication date: 2026-07-06

Last updated on: 2026-07-06

Assigner: Qualcomm, Inc.

Description

Memory Corruption when allocating memory with sizes that exceed the maximum allowed value.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-06

Last Modified

2026-07-06

Generated

2026-07-07

AI Q&A

2026-07-07

EPSS Evaluated

N/A

NVD

CVE-2026-21379

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-126	The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is a memory corruption issue that occurs when memory is allocated with sizes that exceed the maximum allowed value.

Impact Analysis

The vulnerability can lead to severe impacts including high confidentiality, integrity, and availability risks, as indicated by its CVSS score. Exploiting this memory corruption could allow an attacker with local low privileges to cause significant damage to the system.

Hi! I’m here to help you understand CVE-2026-21379. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70