Memory Corruption in Qualcomm Product Due to Insufficient Buffer Size Validation
CVE-2026-21374

7.8HIGH

Key Information:

Vendor

Qualcomm
Status
Snapdragon
Vendor
CVE Published:
6 April 2026

What is CVE-2026-21374?

A vulnerability has been identified in Qualcomm devices which allows for memory corruption due to inadequate validation of buffer sizes when processing auxiliary sensor input/output control commands. This oversight can potentially lead to unexpected behaviors or system instability, posing a security risk to affected devices. It is crucial for users and system administrators to remain vigilant and ensure their systems are updated with the latest security patches to mitigate this issue.

Affected Version(s)

Snapdragon Snapdragon Compute AQT1000

Snapdragon Snapdragon Compute Cologne

Snapdragon Snapdragon Compute FastConnect 6200

References

https://docs.qualcomm.com/product/publicresources/securit...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.