CVE-2026-21372

EPSS 0.1%
Veröffentlicht 06.04.2026 15:33:48
Zuletzt bearbeitet 08.04.2026 21:07:02
Erkennungen
Login

Heap-Based Buffer Overflow in Power Management IC

Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 27 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Qualcomm ≫ Cologne Firmware Version -

Qualcomm ≫ Cologne Version -

Qualcomm ≫ Fastconnect 6700 Firmware Version -

Qualcomm ≫ Fastconnect 6700 Version -

Qualcomm ≫ Fastconnect 6900 Firmware Version -

Qualcomm ≫ Fastconnect 6900 Version -

Qualcomm ≫ Fastconnect 7800 Firmware Version -

Qualcomm ≫ Fastconnect 7800 Version -

Qualcomm ≫ Qcm5430 Firmware Version -

Qualcomm ≫ Qcm5430 Version -

Qualcomm ≫ Qcm6490 Firmware Version -

Qualcomm ≫ Qcm6490 Version -

Qualcomm ≫ Video Collaboration Vc3 Platform Firmware Version -

Qualcomm ≫ Video Collaboration Vc3 Platform Version -

Qualcomm ≫ Snapdragon 460 Mobile Platform Firmware Version -

Qualcomm ≫ Snapdragon 460 Mobile Platform Version -

Qualcomm ≫ Snapdragon 662 Mobile Platform Firmware Version -

Qualcomm ≫ Snapdragon 662 Mobile Platform Version -

Qualcomm ≫ Wcd9370 Firmware Version -

Qualcomm ≫ Wcd9370 Version -

Qualcomm ≫ Wcd9375 Firmware Version -

Qualcomm ≫ Wcd9375 Version -

Qualcomm ≫ Wcd9378c Firmware Version -

Qualcomm ≫ Wcd9378c Version -

Qualcomm ≫ Wcd9380 Firmware Version -

Qualcomm ≫ Wcd9380 Version -

Qualcomm ≫ Wcd9385 Firmware Version -

Qualcomm ≫ Wcd9385 Version -

Qualcomm ≫ Wcn3950 Firmware Version -

Qualcomm ≫ Wcn3950 Version -

Qualcomm ≫ Wcn3988 Firmware Version -

Qualcomm ≫ Wcn3988 Version -

Qualcomm ≫ Wsa8840 Firmware Version -

Qualcomm ≫ Wsa8840 Version -

Qualcomm ≫ Wsa8845 Firmware Version -

Qualcomm ≫ Wsa8845 Version -

Qualcomm ≫ Wsa8845h Firmware Version -

Qualcomm ≫ Wsa8845h Version -

Qualcomm ≫ X2000077 Firmware Version -

Qualcomm ≫ X2000077 Version -

Qualcomm ≫ X2000086 Firmware Version -

Qualcomm ≫ X2000086 Version -

Qualcomm ≫ X2000090 Firmware Version -

Qualcomm ≫ X2000090 Version -

Qualcomm ≫ X2000092 Firmware Version -

Qualcomm ≫ X2000092 Version -

Qualcomm ≫ X2000094 Firmware Version -

Qualcomm ≫ X2000094 Version -

Qualcomm ≫ Xg101002 Firmware Version -

Qualcomm ≫ Xg101002 Version -

Qualcomm ≫ Xg101032 Firmware Version -

Qualcomm ≫ Xg101032 Version -

Qualcomm ≫ Xg101039 Firmware Version -

Qualcomm ≫ Xg101039 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.1%	0.009

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
Qualcomm	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-21372

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-21372

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-21372

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-21372