Memory Corruption Vulnerability in Qualcomm Products
CVE-2026-21373

7.8HIGH

Key Information:

Vendor

Qualcomm
Status
Snapdragon
Vendor
CVE Published:
6 April 2026

What is CVE-2026-21373?

A vulnerability has been identified in certain Qualcomm devices and components, where the lack of proper size validation for an output buffer during IOCTL processing can lead to memory corruption. Exploiting this issue could impact the performance and security of affected systems, making it a critical concern for users and organizations relying on Qualcomm technology. To mitigate risks, it is essential for users to stay updated with the latest security patches and guidelines provided by Qualcomm.

Affected Version(s)

Snapdragon Snapdragon Compute AQT1000

Snapdragon Snapdragon Compute Cologne

Snapdragon Snapdragon Compute FastConnect 6200

References

https://docs.qualcomm.com/product/publicresources/securit...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.