CVE-2026-21372

EPSS 0.01%
Veröffentlicht 06.04.2026 15:33:48
Zuletzt bearbeitet 08.04.2026 21:07:02
Quelle product-security@qualcomm.com
CVE-Watchlists
Login
Unerledigt
Login

Heap-Based Buffer Overflow in Power Management IC

Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 27 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Qualcomm ≫ Cologne Firmware Version-

Qualcomm ≫ Cologne Version-

Qualcomm ≫ Fastconnect 6700 Firmware Version-

Qualcomm ≫ Fastconnect 6700 Version-

Qualcomm ≫ Fastconnect 6900 Firmware Version-

Qualcomm ≫ Fastconnect 6900 Version-

Qualcomm ≫ Fastconnect 7800 Firmware Version-

Qualcomm ≫ Fastconnect 7800 Version-

Qualcomm ≫ Qcm5430 Firmware Version-

Qualcomm ≫ Qcm5430 Version-

Qualcomm ≫ Qcm6490 Firmware Version-

Qualcomm ≫ Qcm6490 Version-

Qualcomm ≫ Video Collaboration Vc3 Platform Firmware Version-

Qualcomm ≫ Video Collaboration Vc3 Platform Version-

Qualcomm ≫ Snapdragon 460 Mobile Platform Firmware Version-

Qualcomm ≫ Snapdragon 460 Mobile Platform Version-

Qualcomm ≫ Snapdragon 662 Mobile Platform Firmware Version-

Qualcomm ≫ Snapdragon 662 Mobile Platform Version-

Qualcomm ≫ Wcd9370 Firmware Version-

Qualcomm ≫ Wcd9370 Version-

Qualcomm ≫ Wcd9375 Firmware Version-

Qualcomm ≫ Wcd9375 Version-

Qualcomm ≫ Wcd9378c Firmware Version-

Qualcomm ≫ Wcd9378c Version-

Qualcomm ≫ Wcd9380 Firmware Version-

Qualcomm ≫ Wcd9380 Version-

Qualcomm ≫ Wcd9385 Firmware Version-

Qualcomm ≫ Wcd9385 Version-

Qualcomm ≫ Wcn3950 Firmware Version-

Qualcomm ≫ Wcn3950 Version-

Qualcomm ≫ Wcn3988 Firmware Version-

Qualcomm ≫ Wcn3988 Version-

Qualcomm ≫ Wsa8840 Firmware Version-

Qualcomm ≫ Wsa8840 Version-

Qualcomm ≫ Wsa8845 Firmware Version-

Qualcomm ≫ Wsa8845 Version-

Qualcomm ≫ Wsa8845h Firmware Version-

Qualcomm ≫ Wsa8845h Version-

Qualcomm ≫ X2000077 Firmware Version-

Qualcomm ≫ X2000077 Version-

Qualcomm ≫ X2000086 Firmware Version-

Qualcomm ≫ X2000086 Version-

Qualcomm ≫ X2000090 Firmware Version-

Qualcomm ≫ X2000090 Version-

Qualcomm ≫ X2000092 Firmware Version-

Qualcomm ≫ X2000092 Version-

Qualcomm ≫ X2000094 Firmware Version-

Qualcomm ≫ X2000094 Version-

Qualcomm ≫ Xg101002 Firmware Version-

Qualcomm ≫ Xg101002 Version-

Qualcomm ≫ Xg101032 Firmware Version-

Qualcomm ≫ Xg101032 Version-

Qualcomm ≫ Xg101039 Firmware Version-

Qualcomm ≫ Xg101039 Version-

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.01%	0.003

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
product-security@qualcomm.com	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-21372

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-21372

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-21372

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-21372