CVE-2026-21372

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-21372", "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "state": "PUBLISHED", "assignerShortName": "qualcomm", "dateReserved": "2025-12-17T04:35:45.742Z", "datePublished": "2026-04-06T15:33:48.447Z", "dateUpdated": "2026-04-07T03:55:49.327Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "platforms": ["Snapdragon Compute", "Snapdragon Industrial IOT", "Snapdragon Mobile"], "product": "Snapdragon", "vendor": "Qualcomm, Inc.", "versions": [{"status": "affected", "version": "Cologne"}, {"status": "affected", "version": "FastConnect 6700"}, {"status": "affected", "version": "FastConnect 6900"}, {"status": "affected", "version": "FastConnect 7800"}, {"status": "affected", "version": "QCM5430"}, {"status": "affected", "version": "QCM6490"}, {"status": "affected", "version": "Qualcomm Video Collaboration VC3 Platform"}, {"status": "affected", "version": "Snapdragon 460 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 662 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 7c+ Gen 3 Compute"}, {"status": "affected", "version": "WCD9370"}, {"status": "affected", "version": "WCD9375"}, {"status": "affected", "version": "WCD9378C"}, {"status": "affected", "version": "WCD9380"}, {"status": "affected", "version": "WCD9385"}, {"status": "affected", "version": "WCN3950"}, {"status": "affected", "version": "WCN3988"}, {"status": "affected", "version": "WSA8840"}, {"status": "affected", "version": "WSA8845"}, {"status": "affected", "version": "WSA8845H"}, {"status": "affected", "version": "X2000077"}, {"status": "affected", "version": "X2000086"}, {"status": "affected", "version": "X2000090"}, {"status": "affected", "version": "X2000092"}, {"status": "affected", "version": "X2000094"}, {"status": "affected", "version": "XG101002"}, {"status": "affected", "version": "XG101032"}, {"status": "affected", "version": "XG101039"}]}], "descriptions": [{"lang": "en", "value": "Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-122", "description": "CWE-122: Heap-Based Buffer Overflow", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "shortName": "qualcomm", "dateUpdated": "2026-04-06T15:33:48.447Z"}, "references": [{"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html"}], "title": "Heap-Based Buffer Overflow in Power Management IC"}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-06T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2026-21372"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-07T03:55:49.327Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-21372", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-04-06T16:12:07.619960Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-06T16:21:05.474Z"}}], "cna": {"title": "Heap-Based Buffer Overflow in Power Management IC", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Qualcomm, Inc.", "product": "Snapdragon", "versions": [{"status": "affected", "version": "Cologne"}, {"status": "affected", "version": "FastConnect 6700"}, {"status": "affected", "version": "FastConnect 6900"}, {"status": "affected", "version": "FastConnect 7800"}, {"status": "affected", "version": "QCM5430"}, {"status": "affected", "version": "QCM6490"}, {"status": "affected", "version": "Qualcomm Video Collaboration VC3 Platform"}, {"status": "affected", "version": "Snapdragon 460 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 662 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 7c+ Gen 3 Compute"}, {"status": "affected", "version": "WCD9370"}, {"status": "affected", "version": "WCD9375"}, {"status": "affected", "version": "WCD9378C"}, {"status": "affected", "version": "WCD9380"}, {"status": "affected", "version": "WCD9385"}, {"status": "affected", "version": "WCN3950"}, {"status": "affected", "version": "WCN3988"}, {"status": "affected", "version": "WSA8840"}, {"status": "affected", "version": "WSA8845"}, {"status": "affected", "version": "WSA8845H"}, {"status": "affected", "version": "X2000077"}, {"status": "affected", "version": "X2000086"}, {"status": "affected", "version": "X2000090"}, {"status": "affected", "version": "X2000092"}, {"status": "affected", "version": "X2000094"}, {"status": "affected", "version": "XG101002"}, {"status": "affected", "version": "XG101032"}, {"status": "affected", "version": "XG101039"}], "platforms": ["Snapdragon Compute", "Snapdragon Industrial IOT", "Snapdragon Mobile"], "defaultStatus": "unaffected"}], "references": [{"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html"}], "descriptions": [{"lang": "en", "value": "Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-122", "description": "CWE-122: Heap-Based Buffer Overflow"}]}], "providerMetadata": {"orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "shortName": "qualcomm", "dateUpdated": "2026-04-06T15:33:48.447Z"}}}, "cveMetadata": {"cveId": "CVE-2026-21372", "state": "PUBLISHED", "dateUpdated": "2026-04-07T03:55:49.327Z", "dateReserved": "2025-12-17T04:35:45.742Z", "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "datePublished": "2026-04-06T15:33:48.447Z", "assignerShortName": "qualcomm"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "platforms": ["Snapdragon Compute", "Snapdragon Industrial IOT", "Snapdragon Mobile"], "product": "Snapdragon", "vendor": "Qualcomm, Inc.", "versions": [{"status": "affected", "version": "Cologne"}, {"status": "affected", "version": "FastConnect 6700"}, {"status": "affected", "version": "FastConnect 6900"}, {"status": "affected", "version": "FastConnect 7800"}, {"status": "affected", "version": "QCM5430"}, {"status": "affected", "version": "QCM6490"}, {"status": "affected", "version": "Qualcomm Video Collaboration VC3 Platform"}, {"status": "affected", "version": "Snapdragon 460 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 662 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 7c+ Gen 3 Compute"}, {"status": "affected", "version": "WCD9370"}, {"status": "affected", "version": "WCD9375"}, {"status": "affected", "version": "WCD9378C"}, {"status": "affected", "version": "WCD9380"}, {"status": "affected", "version": "WCD9385"}, {"status": "affected", "version": "WCN3950"}, {"status": "affected", "version": "WCN3988"}, {"status": "affected", "version": "WSA8840"}, {"status": "affected", "version": "WSA8845"}, {"status": "affected", "version": "WSA8845H"}, {"status": "affected", "version": "X2000077"}, {"status": "affected", "version": "X2000086"}, {"status": "affected", "version": "X2000090"}, {"status": "affected", "version": "X2000092"}, {"status": "affected", "version": "X2000094"}, {"status": "affected", "version": "XG101002"}, {"status": "affected", "version": "XG101032"}, {"status": "affected", "version": "XG101039"}]}], "source": "product-security@qualcomm.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:x2000094_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "789E6127-504B-4B50-B5C7-C7F7933378A1", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:x2000094:-:*:*:*:*:*:*:*", "matchCriteriaId": "5A029C9E-9F11-4D07-BD80-B9D00A379AAD", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:xg101002_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "B7EAE86E-AC65-4C37-A23E-E4C9DBFDEE48", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:xg101002:-:*:*:*:*:*:*:*", "matchCriteriaId": "71E5EA1A-F5AE-42B6-804B-59FE6016A691", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:xg101032_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "45E15ACE-6573-43FC-8B38-A3B760C8B60D", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:xg101032:-:*:*:*:*:*:*:*", "matchCriteriaId": "96CF3B92-6AA8-4494-A047-C0DAB82C01D9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:xg101039_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "4C8F081D-479F-492A-9580-8EBE8011DA4E", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:xg101039:-:*:*:*:*:*:*:*", "matchCriteriaId": "9A96C6B0-5B33-45DA-B3B1-AD304B7AE313", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:x2000092_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E23F8167-8C43-4CCC-B95B-1BF8462E1E90", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:x2000092:-:*:*:*:*:*:*:*", "matchCriteriaId": "65E7DF1E-5CDE-4DF0-A952-A01BF059EB96", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:x2000090_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "21436FFF-DC3A-4279-85BB-1D2F9D270FFC", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:x2000090:-:*:*:*:*:*:*:*", "matchCriteriaId": "991A3700-C97D-4495-8281-A11E0472930C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:x2000086_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E763DC2C-2D41-483D-8763-8518AAFC8B09", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:x2000086:-:*:*:*:*:*:*:*", "matchCriteriaId": "2DD6A8C6-F716-42F3-A16A-70CDD2F72BCD", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:x2000077_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "A91D253E-0E24-474F-B016-0AC783812EBF", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:x2000077:-:*:*:*:*:*:*:*", "matchCriteriaId": "DF588C55-E61D-46C6-98C3-647748AB0192", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "BB7CF473-8B25-4851-91F2-1BD693CCDC85", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wsa8845h:-:*:*:*:*:*:*:*", "matchCriteriaId": "91E591F2-8F72-4A5A-9264-2742EB2DABDA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "5B47BF35-3AA0-4667-842E-19B0FE30BF3C", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wsa8845:-:*:*:*:*:*:*:*", "matchCriteriaId": "8A071672-9405-4418-9141-35CEADBB65AF", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "CA33DE15-C177-43B3-AD50-FF797753D12E", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wsa8840:-:*:*:*:*:*:*:*", "matchCriteriaId": "AE1A5841-5BCB-4033-ACB9-23F3FCA65309", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E4BFB25F-013B-48E3-99FF-3E8687F94423", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wcn3988:-:*:*:*:*:*:*:*", "matchCriteriaId": "BF676C5B-838B-446C-A689-6A25AB8A87E2", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wcn3950_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "3FEF2DB6-00F5-4B07-953B-EF58B31267F1", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wcn3950:-:*:*:*:*:*:*:*", "matchCriteriaId": "120E8F0F-EBEB-4565-9927-2D473F783EF7", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "92B17201-8185-47F1-9720-5AB4ECD11B22", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wcd9385:-:*:*:*:*:*:*:*", "matchCriteriaId": "E1FA2EB9-416F-4D69-8786-386CC73978AE", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "70292B01-617F-44AD-AF77-1AFC1450523D", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:*", "matchCriteriaId": "FA94C6D6-85DB-4031-AAF4-C399019AE16D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wcd9378c_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "95D79E3A-1978-4B23-B60B-2BD47FEDF5C2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wcd9378c:-:*:*:*:*:*:*:*", "matchCriteriaId": "91B32C89-3238-4FDF-BB3F-F6BAE829769B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "34143ABA-7D09-429F-A65C-3A33438BF62C", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wcd9375:-:*:*:*:*:*:*:*", "matchCriteriaId": "9D56DFE3-5EF1-4B23-BBD5-0203FBF9CCEC", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "1295D869-F4DD-4766-B4AA-3513752F43B4", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wcd9370:-:*:*:*:*:*:*:*", "matchCriteriaId": "B98784DC-3143-4D38-AD28-DBBDCCAB4272", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:snapdragon_7c\\+_gen_3_compute_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "C4A050CA-8514-400A-A6B3-F513CC93CA14", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:snapdragon_7c\\+_gen_3_compute:-:*:*:*:*:*:*:*", "matchCriteriaId": "BD850305-1E76-4952-A3FB-F6229CBF7FE9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:snapdragon_662_mobile_platform_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "37DF4D73-3ACC-41B3-8CA4-20DAECE6BFB7", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:snapdragon_662_mobile_platform:-:*:*:*:*:*:*:*", "matchCriteriaId": "FE08D23A-2D0D-4472-8847-27B955F55165", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:snapdragon_460_mobile_platform_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "390D7CAF-6C0B-4438-AA7D-AEEE127F4D3C", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:snapdragon_460_mobile_platform:-:*:*:*:*:*:*:*", "matchCriteriaId": "5BB1FC5E-CF6F-4E54-B78D-C01AFD034903", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:video_collaboration_vc3_platform_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "DD4946C6-778F-4542-AB77-C9B86AF25C05", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:video_collaboration_vc3_platform:-:*:*:*:*:*:*:*", "matchCriteriaId": "6F1D604A-4530-42B3-80A0-58A82D658DDD", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcm6490_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "ADD6D51E-5787-42A6-8A02-4EBBAFFF9C94", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcm6490:-:*:*:*:*:*:*:*", "matchCriteriaId": "99AA0291-B822-4CAD-BA17-81B632FC3FEF", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcm5430_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "4EC5F81B-AA24-4E3C-9FC8-53E010AC977E", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcm5430:-:*:*:*:*:*:*:*", "matchCriteriaId": "B5C66DAD-0D85-46B8-92D7-6D68B9429E9A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "B3053D68-C5D8-4D47-A4F0-9F3AF2289E1D", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:fastconnect_7800:-:*:*:*:*:*:*:*", "matchCriteriaId": "638DBC7F-456F-487D-BED2-2214DFF8BEE2", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E670F500-9B71-4BBE-B5DA-221D35803C89", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:fastconnect_6900:-:*:*:*:*:*:*:*", "matchCriteriaId": "9ADEB5C5-B79A-4F45-B7D3-75945B38DB6C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:fastconnect_6700_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "82B82E87-F3F4-466F-A76B-C8809121FF6F", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:fastconnect_6700:-:*:*:*:*:*:*:*", "matchCriteriaId": "419A132E-E42C-4395-B74B-788A39DF1D13", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:cologne_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "8FF959C0-5AAB-4DC5-AE8F-4EFA21A00B5E", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:cologne:-:*:*:*:*:*:*:*", "matchCriteriaId": "E31E0C48-FB61-47C8-B28B-3A701E85E126", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations."}, {"lang": "es", "value": "Corrupci\u00f3n de memoria al enviar solicitudes IOCTL con tama\u00f1os de b\u00fafer inv\u00e1lidos durante operaciones de memcpy."}], "id": "CVE-2026-21372", "lastModified": "2026-10-25T23:10:00.167", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "product-security@qualcomm.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-21372", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-04-06T00:00:00+00:00", "version": "2.0.3"}}]}, "published": "2026-04-06T16:16:29.767", "references": [{"source": "product-security@qualcomm.com", "tags": ["Vendor Advisory"], "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html"}], "sourceIdentifier": "product-security@qualcomm.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-122"}], "source": "product-security@qualcomm.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": ["snapdragon_compute", "snapdragon_industrial_iot", "snapdragon_mobile"], "status": "affected", "versions": {"scheme": "generic", "value": "Cologne"}}, {"platform": ["snapdragon_compute", "snapdragon_industrial_iot", "snapdragon_mobile"], "status": "affected", "versions": {"scheme": "generic", "value": "FastConnect 6700"}}, {"platform": ["snapdragon_compute", "snapdragon_industrial_iot", "snapdragon_mobile"], "status": "affected", "versions": {"scheme": "generic", "value": "FastConnect 6900"}}, {"platform": ["snapdragon_compute", "snapdragon_industrial_iot", "snapdragon_mobile"], "status": "affected", "versions": {"scheme": "generic", "value": "FastConnect 7800"}}, {"platform": ["snapdragon_compute", "snapdragon_industrial_iot", "snapdragon_mobile"], "status": "affected", "versions": {"scheme": "generic", "value": "QCM5430"}}, {"platform": ["snapdragon_compute", "snapdragon_industrial_iot", "snapdragon_mobile"], "status": "affected", "versions": {"scheme": "generic", "value": "QCM6490"}}, {"platform": ["snapdragon_compute", "snapdragon_industrial_iot", "snapdragon_mobile"], "status": "affected", "versions": {"scheme": "generic", "value": "Qualcomm Video Collaboration VC3 Platform"}}, {"platform": ["snapdragon_compute", "snapdragon_industrial_iot", "snapdragon_mobile"], "status": "affected", "versions": {"scheme": "generic", "value": "Snapdragon 460 Mobile Platform"}}, {"platform": ["snapdragon_compute", "snapdragon_industrial_iot", "snapdragon_mobile"], "status": "affected", "versions": {"scheme": "generic", "value": "Snapdragon 662 Mobile Platform"}}, {"platform": ["snapdragon_compute", "snapdragon_industrial_iot", "snapdragon_mobile"], "status": "affected", "versions": {"scheme": "generic", "value": "Snapdragon 7c+ Gen 3 Compute"}}, {"platform": ["snapdragon_compute", "snapdragon_industrial_iot", "snapdragon_mobile"], "status": "affected", "versions": {"scheme": "generic", "value": "WCD9370"}}, {"platform": ["snapdragon_compute", "snapdragon_industrial_iot", "snapdragon_mobile"], "status": "affected", "versions": {"scheme": "generic", "value": "WCD9375"}}, {"platform": ["snapdragon_compute", "snapdragon_industrial_iot", "snapdragon_mobile"], "status": "affected", "versions": {"scheme": "generic", "value": "WCD9378C"}}, {"platform": ["snapdragon_compute", "snapdragon_industrial_iot", "snapdragon_mobile"], "status": "affected", "versions": {"scheme": "generic", "value": "WCD9380"}}, {"platform": ["snapdragon_compute", "snapdragon_industrial_iot", "snapdragon_mobile"], "status": "affected", "versions": {"scheme": "generic", "value": "WCD9385"}}, {"platform": ["snapdragon_compute", "snapdragon_industrial_iot", "snapdragon_mobile"], "status": "affected", "versions": {"scheme": "generic", "value": "WCN3950"}}, {"platform": ["snapdragon_compute", "snapdragon_industrial_iot", "snapdragon_mobile"], "status": "affected", "versions": {"scheme": "generic", "value": "WCN3988"}}, {"platform": ["snapdragon_compute", "snapdragon_industrial_iot", "snapdragon_mobile"], "status": "affected", "versions": {"scheme": "generic", "value": "WSA8840"}}, {"platform": ["snapdragon_compute", "snapdragon_industrial_iot", "snapdragon_mobile"], "status": "affected", "versions": {"scheme": "generic", "value": "WSA8845"}}, {"platform": ["snapdragon_compute", "snapdragon_industrial_iot", "snapdragon_mobile"], "status": "affected", "versions": {"scheme": "generic", "value": "WSA8845H"}}, {"platform": ["snapdragon_compute", "snapdragon_industrial_iot", "snapdragon_mobile"], "status": "affected", "versions": {"scheme": "generic", "value": "X2000077"}}, {"platform": ["snapdragon_compute", "snapdragon_industrial_iot", "snapdragon_mobile"], "status": "affected", "versions": {"scheme": "generic", "value": "X2000086"}}, {"platform": ["snapdragon_compute", "snapdragon_industrial_iot", "snapdragon_mobile"], "status": "affected", "versions": {"scheme": "generic", "value": "X2000090"}}, {"platform": ["snapdragon_compute", "snapdragon_industrial_iot", "snapdragon_mobile"], "status": "affected", "versions": {"scheme": "generic", "value": "X2000092"}}, {"platform": ["snapdragon_compute", "snapdragon_industrial_iot", "snapdragon_mobile"], "status": "affected", "versions": {"scheme": "generic", "value": "X2000094"}}, {"platform": ["snapdragon_compute", "snapdragon_industrial_iot", "snapdragon_mobile"], "status": "affected", "versions": {"scheme": "generic", "value": "XG101002"}}, {"platform": ["snapdragon_compute", "snapdragon_industrial_iot", "snapdragon_mobile"], "status": "affected", "versions": {"scheme": "generic", "value": "XG101032"}}, {"platform": ["snapdragon_compute", "snapdragon_industrial_iot", "snapdragon_mobile"], "status": "affected", "versions": {"scheme": "generic", "value": "XG101039"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Snapdragon", "source": "cna", "vendor": "Qualcomm, Inc."}, "product": "snapdragon", "vendor": "qualcomm"}], "analysis": {"en": {"generated_at": "2026-04-08T23:04:33.703157+00:00", "value": {"mitigation_remediation": ["Check Qualcomm\u2019s security bulletin for a patch or firmware update.", "Apply any available firmware or driver patch as soon as it is released.", "Restrict access to the vulnerable Power Management IC driver to trusted users or processes.", "Audit and disable unused device drivers if possible to reduce attack surface.", "Monitor system logs for abnormal IOCTL activity or crash events that could indicate exploitation attempts."], "summary": {"action": "Immediate Patch", "impact": "Remote Code Execution"}, "threat_synthesis": {"affected_systems": "Affected systems encompass Qualcomm Snapdragon platforms and their firmware, including Snapdragon\u00a0460, Snapdragon\u00a0662, Snapdragon\u00a07c+\u00a0Gen\u202f3\u202fCompute, FastConnect modules, Video Collaboration platforms, and associated firmware components. The broad list of CPEs shows that both the operating system and the specialized DSP/firmware layers may be impacted.", "description_and_impact": "The vulnerability is a heap\u2011based buffer overflow triggered by malformed IOCTL requests that contain invalid buffer sizes when the driver performs a memcpy operation. The overflow corrupts heap memory and can lead to arbitrary code execution or a denial of service on the device. This flaw is identified as CWE\u2011122, indicating an unbounded write into adjacent memory.", "risk_and_exploitability": "The reported CVSS score of 7.8 reflects high severity, yet the EPSS score of less than\u202f1\u202f% points to a low probability of real\u2011world exploitation, and the flaw is not listed in CISA\u2019s KEV catalog. Therefore, the exposure is moderate. The likely attack vector is local: an attacker must interact with the vulnerable driver and send malformed IOCTLs; remote exploitation would require the driver to be exposed over a network or via a privileged service, which is not explicitly documented."}}}}, "created": "2026-04-06T21:32:03.860885+00:00", "updated": "2026-04-09T08:28:54.975324+00:00", "vendors": ["qualcomm", "qualcomm$PRODUCT$snapdragon"]}