Vulnerability-Lookup

BDU:2026-05033

Vulnerability from fstec - Published: 05.01.2026

Title

Уязвимость микропрограммного обеспечения встраиваемых плат Qualcomm, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю вызвать повреждение памяти

Description

Уязвимость микропрограммного обеспечения встраиваемых плат Qualcomm связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю вызвать повреждение памяти

Severity


                    
                      AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Vendor

Qualcomm Technologies Inc.

Software Name

SD 8 Gen1 5G, WCD9380, WSA8830, WSA8835, AR8035, SM8475P, Snapdragon 8 Gen 1 Mobile Platform, Snapdragon 8+ Gen 1 Mobile Platform, Snapdragon X75 5G Modem-RF System, Immersive Home 214 Platform, Immersive Home 216 Platform, Immersive Home 316 Platform, Immersive Home 318 Platform, IPQ5010, IPQ5028, IPQ8076, IPQ8078, QCA9889, QCN5024, QCN5124, QCN5154, QCN5164, QCN6122, QCN6132, QCN9100, IPQ9574, QCA9888, QCC2073, QCC2076, QCN9022, Snapdragon 8 Gen 3 Mobile Platform, Snapdragon X72 5G Modem-RF System, QCA6777AQ, QCA6787AQ, SM8750P, WCN7860, WCN7861, WCN7880, WCN7881, FastConnect 6700, FastConnect 6900, FastConnect 7800, QCS4490, QCM4490, WCD9370, WCD9390, WCD9395, WCN3950, WSA8810, WSA8815, WSA8832, WSA8840, WSA8845, WSA8845H, CSR8811, IPQ6000, IPQ6010, IPQ6018, QCA4024, QCA6797AQ, QCA8075, QCA8081, QCA8082, QCA8084, QCA8085, QCA8337, QCA8386, QCC710, QCN5022, QCN5052, QCN5122, QCN5152, QCN6023, QCN6024, QCN6224, QCN6274, QCN9000, QCN9012, QCN9024, QCN9070, QCN9274, QCS8550, QFW7114, QFW7124, SM7675, SM7675P, SM8635, SM8635P, WCD9340, WCD9375, WCD9378, WCD9385, WCN3988, WCN6450, WCN6650, WCN6755, SM6650P, SM8650Q, QMP1000, SM7435, SM7635P, FastConnect 6200, QCA6391, QCA6698AU, QCN9011, SC8380XP, WCD9378C, X2000077, X2000086, X2000090, X2000092, X2000094, XG101002, XG101032, XG101039, Snapdragon 6 Gen 1 Mobile Platform, Snapdragon 7 Gen 1 Mobile Platform, Snapdragon 7+ Gen 2 Mobile Platform, G2 Gen 1, Milos, Netrani, Orne, Palawan25, Pandeiro, QLN1083BD, QLN1086BD, QPA1083BD, QPA1086BD, QXM1093, QXM1094, QXM1095, QXM1096, SAR2130P, Snapdragon 6 Gen 3 Mobile Platform, Snapdragon 6 Gen 4 Mobile Platform, Snapdragon 7s Gen 3 Mobile Platform, Snapdragon 8 Elite, Snapdragon 8 Elite Gen 5, Cologne, FWA Gen 3 Ultra Platform, Networking Pro 1200 Platform, Networking Pro 1210 Platform, Networking Pro 1610 Platform, Networking Pro 400 Platform, Networking Pro 600 Platform, Networking Pro 610 Platform, Networking Pro 800 Platform, Networking Pro 810 Platform, XRV7209, XRV9209

Software Version

- (SD 8 Gen1 5G), - (WCD9380), - (WSA8830), - (WSA8835), - (AR8035), - (SM8475P), - (Snapdragon 8 Gen 1 Mobile Platform), - (Snapdragon 8+ Gen 1 Mobile Platform), - (Snapdragon X75 5G Modem-RF System), - (Immersive Home 214 Platform), - (Immersive Home 216 Platform), - (Immersive Home 316 Platform), - (Immersive Home 318 Platform), - (IPQ5010), - (IPQ5028), - (IPQ8076), - (IPQ8078), - (QCA9889), - (QCN5024), - (QCN5124), - (QCN5154), - (QCN5164), - (QCN6122), - (QCN6132), - (QCN9100), - (IPQ9574), - (QCA9888), - (QCC2073), - (QCC2076), - (QCN9022), - (Snapdragon 8 Gen 3 Mobile Platform), - (Snapdragon X72 5G Modem-RF System), - (QCA6777AQ), - (QCA6787AQ), - (SM8750P), - (WCN7860), - (WCN7861), - (WCN7880), - (WCN7881), - (FastConnect 6700), - (FastConnect 6900), - (FastConnect 7800), - (QCS4490), - (QCM4490), - (WCD9370), - (WCD9390), - (WCD9395), - (WCN3950), - (WSA8810), - (WSA8815), - (WSA8832), - (WSA8840), - (WSA8845), - (WSA8845H), - (CSR8811), - (IPQ6000), - (IPQ6010), - (IPQ6018), - (QCA4024), - (QCA6797AQ), - (QCA8075), - (QCA8081), - (QCA8082), - (QCA8084), - (QCA8085), - (QCA8337), - (QCA8386), - (QCC710), - (QCN5022), - (QCN5052), - (QCN5122), - (QCN5152), - (QCN6023), - (QCN6024), - (QCN6224), - (QCN6274), - (QCN9000), - (QCN9012), - (QCN9024), - (QCN9070), - (QCN9274), - (QCS8550), - (QFW7114), - (QFW7124), - (SM7675), - (SM7675P), - (SM8635), - (SM8635P), - (WCD9340), - (WCD9375), - (WCD9378), - (WCD9385), - (WCN3988), - (WCN6450), - (WCN6650), - (WCN6755), - (SM6650P), - (SM8650Q), - (QMP1000), - (SM7435), - (SM7635P), - (FastConnect 6200), - (QCA6391), - (QCA6698AU), - (QCN9011), - (SC8380XP), - (WCD9378C), - (X2000077), - (X2000086), - (X2000090), - (X2000092), - (X2000094), - (XG101002), - (XG101032), - (XG101039), - (Snapdragon 6 Gen 1 Mobile Platform), - (Snapdragon 7 Gen 1 Mobile Platform), - (Snapdragon 7+ Gen 2 Mobile Platform), - (G2 Gen 1), - (Milos), - (Netrani), - (Orne), - (Palawan25), - (Pandeiro), - (QLN1083BD), - (QLN1086BD), - (QPA1083BD), - (QPA1086BD), - (QXM1093), - (QXM1094), - (QXM1095), - (QXM1096), - (SAR2130P), - (Snapdragon 6 Gen 3 Mobile Platform), - (Snapdragon 6 Gen 4 Mobile Platform), - (Snapdragon 7s Gen 3 Mobile Platform), - (Snapdragon 8 Elite), - (Snapdragon 8 Elite Gen 5), - (Cologne), - (FWA Gen 3 Ultra Platform), - (Networking Pro 1200 Platform), - (Networking Pro 1210 Platform), - (Networking Pro 1610 Platform), - (Networking Pro 400 Platform), - (Networking Pro 600 Platform), - (Networking Pro 610 Platform), - (Networking Pro 800 Platform), - (Networking Pro 810 Platform), - (XRV7209), - (XRV9209)

Possible Mitigations

Использование рекомендаций производителя: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html

Reference

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html

CWE

CWE-126

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:L/Au:S/C:C/I:C/A:C",
  "CVSS 3.0": "AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Qualcomm Technologies Inc.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "- (SD 8 Gen1 5G), - (WCD9380), - (WSA8830), - (WSA8835), - (AR8035), - (SM8475P), - (Snapdragon 8 Gen 1 Mobile Platform), - (Snapdragon 8+ Gen 1 Mobile Platform), - (Snapdragon X75 5G Modem-RF System), - (Immersive Home 214 Platform), - (Immersive Home 216 Platform), - (Immersive Home 316 Platform), - (Immersive Home 318 Platform), - (IPQ5010), - (IPQ5028), - (IPQ8076), - (IPQ8078), - (QCA9889), - (QCN5024), - (QCN5124), - (QCN5154), - (QCN5164), - (QCN6122), - (QCN6132), - (QCN9100), - (IPQ9574), - (QCA9888), - (QCC2073), - (QCC2076), - (QCN9022), - (Snapdragon 8 Gen 3 Mobile Platform), - (Snapdragon X72 5G Modem-RF System), - (QCA6777AQ), - (QCA6787AQ), - (SM8750P), - (WCN7860), - (WCN7861), - (WCN7880), - (WCN7881), - (FastConnect 6700), - (FastConnect 6900), - (FastConnect 7800), - (QCS4490), - (QCM4490), - (WCD9370), - (WCD9390), - (WCD9395), - (WCN3950), - (WSA8810), - (WSA8815), - (WSA8832), - (WSA8840), - (WSA8845), - (WSA8845H), - (CSR8811), - (IPQ6000), - (IPQ6010), - (IPQ6018), - (QCA4024), - (QCA6797AQ), - (QCA8075), - (QCA8081), - (QCA8082), - (QCA8084), - (QCA8085), - (QCA8337), - (QCA8386), - (QCC710), - (QCN5022), - (QCN5052), - (QCN5122), - (QCN5152), - (QCN6023), - (QCN6024), - (QCN6224), - (QCN6274), - (QCN9000), - (QCN9012), - (QCN9024), - (QCN9070), - (QCN9274), - (QCS8550), - (QFW7114), - (QFW7124), - (SM7675), - (SM7675P), - (SM8635), - (SM8635P), - (WCD9340), - (WCD9375), - (WCD9378), - (WCD9385), - (WCN3988), - (WCN6450), - (WCN6650), - (WCN6755), - (SM6650P), - (SM8650Q), - (QMP1000), - (SM7435), - (SM7635P), - (FastConnect 6200), - (QCA6391), - (QCA6698AU), - (QCN9011), - (SC8380XP), - (WCD9378C), - (X2000077), - (X2000086), - (X2000090), - (X2000092), - (X2000094), - (XG101002), - (XG101032), - (XG101039), - (Snapdragon 6 Gen 1 Mobile Platform), - (Snapdragon 7 Gen 1 Mobile Platform), - (Snapdragon 7+ Gen 2 Mobile Platform), - (G2 Gen 1), - (Milos), - (Netrani), - (Orne), - (Palawan25), - (Pandeiro), - (QLN1083BD), - (QLN1086BD), - (QPA1083BD), - (QPA1086BD), - (QXM1093), - (QXM1094), - (QXM1095), - (QXM1096), - (SAR2130P), - (Snapdragon 6 Gen 3 Mobile Platform), - (Snapdragon 6 Gen 4 Mobile Platform), - (Snapdragon 7s Gen 3 Mobile Platform), - (Snapdragon 8 Elite), - (Snapdragon 8 Elite Gen 5), - (Cologne), - (FWA Gen 3 Ultra Platform), - (Networking Pro 1200 Platform), - (Networking Pro 1210 Platform), - (Networking Pro 1610 Platform), - (Networking Pro 400 Platform), - (Networking Pro 600 Platform), - (Networking Pro 610 Platform), - (Networking Pro 800 Platform), - (Networking Pro 810 Platform), - (XRV7209), - (XRV9209)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "05.01.2026",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "13.04.2026",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "13.04.2026",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2026-05033",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2026-21375",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "SD 8 Gen1 5G, WCD9380, WSA8830, WSA8835, AR8035, SM8475P, Snapdragon 8 Gen 1 Mobile Platform, Snapdragon 8+ Gen 1 Mobile Platform, Snapdragon X75 5G Modem-RF System, Immersive Home 214 Platform, Immersive Home 216 Platform, Immersive Home 316 Platform, Immersive Home 318 Platform, IPQ5010, IPQ5028, IPQ8076, IPQ8078, QCA9889, QCN5024, QCN5124, QCN5154, QCN5164, QCN6122, QCN6132, QCN9100, IPQ9574, QCA9888, QCC2073, QCC2076, QCN9022, Snapdragon 8 Gen 3 Mobile Platform, Snapdragon X72 5G Modem-RF System, QCA6777AQ, QCA6787AQ, SM8750P, WCN7860, WCN7861, WCN7880, WCN7881, FastConnect 6700, FastConnect 6900, FastConnect 7800, QCS4490, QCM4490, WCD9370, WCD9390, WCD9395, WCN3950, WSA8810, WSA8815, WSA8832, WSA8840, WSA8845, WSA8845H, CSR8811, IPQ6000, IPQ6010, IPQ6018, QCA4024, QCA6797AQ, QCA8075, QCA8081, QCA8082, QCA8084, QCA8085, QCA8337, QCA8386, QCC710, QCN5022, QCN5052, QCN5122, QCN5152, QCN6023, QCN6024, QCN6224, QCN6274, QCN9000, QCN9012, QCN9024, QCN9070, QCN9274, QCS8550, QFW7114, QFW7124, SM7675, SM7675P, SM8635, SM8635P, WCD9340, WCD9375, WCD9378, WCD9385, WCN3988, WCN6450, WCN6650, WCN6755, SM6650P, SM8650Q, QMP1000, SM7435, SM7635P, FastConnect 6200, QCA6391, QCA6698AU, QCN9011, SC8380XP, WCD9378C, X2000077, X2000086, X2000090, X2000092, X2000094, XG101002, XG101032, XG101039, Snapdragon 6 Gen 1 Mobile Platform, Snapdragon 7 Gen 1 Mobile Platform, Snapdragon 7+ Gen 2 Mobile Platform, G2 Gen 1, Milos, Netrani, Orne, Palawan25, Pandeiro, QLN1083BD, QLN1086BD, QPA1083BD, QPA1086BD, QXM1093, QXM1094, QXM1095, QXM1096, SAR2130P, Snapdragon 6 Gen 3 Mobile Platform, Snapdragon 6 Gen 4 Mobile Platform, Snapdragon 7s Gen 3 Mobile Platform, Snapdragon 8 Elite, Snapdragon 8 Elite Gen 5, Cologne, FWA Gen 3 Ultra Platform, Networking Pro 1200 Platform, Networking Pro 1210 Platform, Networking Pro 1610 Platform, Networking Pro 400 Platform, Networking Pro 600 Platform, Networking Pro 610 Platform, Networking Pro 800 Platform, Networking Pro 810 Platform, XRV7209, XRV9209",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043f\u043b\u0430\u0442 Qualcomm, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0427\u0442\u0435\u043d\u0438\u0435 \u0438\u0437 \u043f\u0430\u043c\u044f\u0442\u0438, \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u0435\u0439 \u043e\u043a\u043e\u043d\u0447\u0430\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 (CWE-126)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043f\u043b\u0430\u0442 Qualcomm \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434, \u0421\u0435\u0442\u0435\u0432\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e, \u041f\u041e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430, \u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-126",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,8)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,8)"
}

CVE-2026-21375 (GCVE-0-2026-21375)

Vulnerability from cvelistv5 – Published: 2026-04-06 15:33 – Updated: 2026-04-07 03:55

Title

Buffer Over-read in Camera

Summary

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-04-06 00:00 UTC

CWE

CWE-126 - Buffer Over-read

Assigner

qualcomm mitre root

References

1 reference

URL	Tags
https://docs.qualcomm.com/product/publicresources…

Impacted products

1 product

Vendor	Product	Version
Qualcomm, Inc.	Snapdragon	Affected: Cologne Affected: FastConnect 6700 Affected: FastConnect 6900 Affected: FastConnect 7800 Affected: QCA0000 Affected: QCM5430 Affected: QCM6490 Affected: Qualcomm Video Collaboration VC3 Platform Affected: SC8380XP Affected: Snapdragon 460 Mobile Platform Affected: Snapdragon 662 Mobile Platform Affected: Snapdragon 7c+ Gen 3 Compute Affected: Snapdragon 8cx Gen 3 Compute Platform Affected: Snapdragon AR1 Gen 1 Platform Affected: WCD9370 Affected: WCD9375 Affected: WCD9378C Affected: WCD9380 Affected: WCD9385 Affected: WCN3950 Affected: WCN3988 Affected: WSA8830 Affected: WSA8832 Affected: WSA8835 Affected: WSA8840 Affected: WSA8845 Affected: WSA8845H Affected: X2000077 Affected: X2000086 Affected: X2000090 Affected: X2000092 Affected: X2000094 Affected: XG101002 Affected: XG101032 Affected: XG101039

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-21375",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-06T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-07T03:55:52.971Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Snapdragon Compute",
            "Snapdragon Industrial IOT",
            "Snapdragon Mobile"
          ],
          "product": "Snapdragon",
          "vendor": "Qualcomm, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "Cologne"
            },
            {
              "status": "affected",
              "version": "FastConnect 6700"
            },
            {
              "status": "affected",
              "version": "FastConnect 6900"
            },
            {
              "status": "affected",
              "version": "FastConnect 7800"
            },
            {
              "status": "affected",
              "version": "QCA0000"
            },
            {
              "status": "affected",
              "version": "QCM5430"
            },
            {
              "status": "affected",
              "version": "QCM6490"
            },
            {
              "status": "affected",
              "version": "Qualcomm Video Collaboration VC3 Platform"
            },
            {
              "status": "affected",
              "version": "SC8380XP"
            },
            {
              "status": "affected",
              "version": "Snapdragon 460 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 662 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 7c+ Gen 3 Compute"
            },
            {
              "status": "affected",
              "version": "Snapdragon 8cx Gen 3 Compute Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon AR1 Gen 1 Platform"
            },
            {
              "status": "affected",
              "version": "WCD9370"
            },
            {
              "status": "affected",
              "version": "WCD9375"
            },
            {
              "status": "affected",
              "version": "WCD9378C"
            },
            {
              "status": "affected",
              "version": "WCD9380"
            },
            {
              "status": "affected",
              "version": "WCD9385"
            },
            {
              "status": "affected",
              "version": "WCN3950"
            },
            {
              "status": "affected",
              "version": "WCN3988"
            },
            {
              "status": "affected",
              "version": "WSA8830"
            },
            {
              "status": "affected",
              "version": "WSA8832"
            },
            {
              "status": "affected",
              "version": "WSA8835"
            },
            {
              "status": "affected",
              "version": "WSA8840"
            },
            {
              "status": "affected",
              "version": "WSA8845"
            },
            {
              "status": "affected",
              "version": "WSA8845H"
            },
            {
              "status": "affected",
              "version": "X2000077"
            },
            {
              "status": "affected",
              "version": "X2000086"
            },
            {
              "status": "affected",
              "version": "X2000090"
            },
            {
              "status": "affected",
              "version": "X2000092"
            },
            {
              "status": "affected",
              "version": "X2000094"
            },
            {
              "status": "affected",
              "version": "XG101002"
            },
            {
              "status": "affected",
              "version": "XG101032"
            },
            {
              "status": "affected",
              "version": "XG101039"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Memory Corruption when accessing an output buffer without validating its size during IOCTL processing."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-126",
              "description": "CWE-126 Buffer Over-read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-06T15:33:51.531Z",
        "orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
        "shortName": "qualcomm"
      },
      "references": [
        {
          "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html"
        }
      ],
      "title": "Buffer Over-read in Camera"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
    "assignerShortName": "qualcomm",
    "cveId": "CVE-2026-21375",
    "datePublished": "2026-04-06T15:33:51.531Z",
    "dateReserved": "2025-12-17T04:35:45.742Z",
    "dateUpdated": "2026-04-07T03:55:52.971Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.