Memory Corruption in Qualcomm Chipset Firmware

Publication date: 2026-07-06

Last updated on: 2026-07-06

Assigner: Qualcomm, Inc.

Description

Memory Corruption when updating prepared commands with invalid port indices based on user space input exceeds supported read client limits.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-06

Last Modified

2026-07-06

Generated

2026-07-07

AI Q&A

2026-07-07

EPSS Evaluated

N/A

NVD

CVE-2026-21384

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability involves memory corruption that occurs when prepared commands are updated with invalid port indices. These invalid indices come from user space input that exceeds the supported read client limits.

Impact Analysis

The memory corruption caused by this vulnerability can lead to a partial compromise of confidentiality, integrity, and availability. Specifically, it may allow an attacker with limited privileges and local access to cause data corruption or leakage, potentially impacting system stability and security.

Hi! I’m here to help you understand CVE-2026-21384. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70