Memory Corruption Vulnerability in Qualcomm Products
CVE-2026-21371

7.8HIGH

Key Information:

Vendor

Qualcomm
Status
Snapdragon
Vendor
CVE Published:
6 April 2026

What is CVE-2026-21371?

A memory corruption vulnerability exists in Qualcomm products, resulting from inadequate validation of the output buffer size. This flaw may allow attackers to manipulate memory contents, leading to potential exploitation. Affected versions need to implement proper size checks and validation processes to secure applications against unwanted data breaches and system integrity compromises.

Affected Version(s)

Snapdragon Snapdragon Compute AQT1000

Snapdragon Snapdragon Compute Cologne

Snapdragon Snapdragon Compute FastConnect 6200

References

https://docs.qualcomm.com/product/publicresources/securit...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.