CVE-2026-21369 (GCVE-0-2026-21369)

Vulnerability from cvelistv5 – Published: 2026-07-06 20:09 – Updated: 2026-07-07 13:10
VLAI
Title
Out-of-bounds Write in Camera Driver
Summary
Memory Corruption when handling flash commands due to outdated LED count values being used after userspace modification.
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-07-07 03:56 UTC
CWE
Assigner
qualcomm CNA
Impacted products
Vendor Product Version
Qualcomm, Inc. Snapdragon Affected: FastConnect 6200
Affected: FastConnect 6700
Affected: FastConnect 6900
Affected: FastConnect 7800
Affected: G1 Gen 1
Affected: G3x Gen 2
Affected: IQ9 Series Platform
Affected: Kalpeni
Affected: LeMans_AU_LGIT
Affected: LeMansAU
Affected: Pandeiro
Affected: QAM8255P
Affected: QAM8295P
Affected: QAMSRV1H
Affected: QAMSRV1M
Affected: QCA6574AU
Affected: QCA6595
Affected: QCA6688AQ
Affected: QCA6696
Affected: QCA6698AQ
Affected: QCA6797AQ
Affected: QCA8695AU
Affected: QCM2290
Affected: QCM4325
Affected: QCM4490
Affected: QCM5430
Affected: QCM6490
Affected: QCM8838
Affected: QCS2290
Affected: QCS4290
Affected: QCS4490
Affected: QLN1083BD
Affected: QLN1086BD
Affected: QPA1083BD
Affected: QPA1086BD
Affected: Qualcomm Video Collaboration VC3 Platform
Affected: QXM1093
Affected: QXM1094
Affected: QXM1095
Affected: QXM1096
Affected: SA6155P
Affected: SA7255P
Affected: SA7775P
Affected: SA8155P
Affected: SA8195P
Affected: SA8255P
Affected: SA8295P
Affected: SA8620P
Affected: SA8770P
Affected: SA9000P
Affected: SAR2130P
Affected: SC8380XP
Affected: SD662
Affected: SD865 5G
Affected: SDR753
Affected: SM6225P
Affected: SM7525
Affected: SM7550
Affected: SM7550P
Affected: SM8550P
Affected: Snapdragon 4 Gen 1 Mobile Platform
Affected: Snapdragon 460 Mobile Platform
Affected: Snapdragon 480 5G Mobile Platform
Affected: Snapdragon 480+ 5G Mobile Platform
Affected: Snapdragon 662 Mobile Platform
Affected: Snapdragon 680 4G Mobile Platform
Affected: Snapdragon 685 4G Mobile Platform
Affected: Snapdragon 695 5G Mobile Platform
Affected: Snapdragon 8 Elite
Affected: Snapdragon 8 Gen 2 Mobile Platform
Affected: Snapdragon 8+ Gen 2 Mobile Platform
Affected: Snapdragon AR1 Gen 1 Platform
Affected: Snapdragon XR2 5G Platform
Affected: Snapdragon XR2+ Gen 1 Platform
Affected: Snapdragon Wear Elite platform
Affected: SRV1H
Affected: SRV1M
Affected: SXR2230P
Affected: SXR2330P
Affected: SXR2350P
Affected: Themisto
Affected: WCD9370
Affected: WCD9371
Affected: WCD9375
Affected: WCD9378
Affected: WCD9380
Affected: WCD9385
Affected: WCD9390
Affected: WCD9395
Affected: WCN3910
Affected: WCN3950
Affected: WCN3988
Affected: WCN6450
Affected: WCN6650
Affected: WCN6755
Affected: WCN7860
Affected: WCN7861
Affected: WCN7881
Affected: WSA8810
Affected: WSA8815
Affected: WSA8830
Affected: WSA8832
Affected: WSA8835
Affected: WSA8840
Affected: WSA8845
Affected: WSA8845H
Affected: X1E80100
Affected: XRV7209
Affected: XRV9209
Create a notification for this product.
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-21369",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-07T03:56:29.211167Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-07T13:10:43.683Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Snapdragon Auto",
            "Snapdragon Compute",
            "Snapdragon Consumer IOT",
            "Snapdragon Industrial IOT",
            "Snapdragon Mobile",
            "Snapdragon Wearables"
          ],
          "product": "Snapdragon",
          "vendor": "Qualcomm, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "FastConnect 6200"
            },
            {
              "status": "affected",
              "version": "FastConnect 6700"
            },
            {
              "status": "affected",
              "version": "FastConnect 6900"
            },
            {
              "status": "affected",
              "version": "FastConnect 7800"
            },
            {
              "status": "affected",
              "version": "G1 Gen 1"
            },
            {
              "status": "affected",
              "version": "G3x Gen 2"
            },
            {
              "status": "affected",
              "version": "IQ9 Series Platform"
            },
            {
              "status": "affected",
              "version": "Kalpeni"
            },
            {
              "status": "affected",
              "version": "LeMans_AU_LGIT"
            },
            {
              "status": "affected",
              "version": "LeMansAU"
            },
            {
              "status": "affected",
              "version": "Pandeiro"
            },
            {
              "status": "affected",
              "version": "QAM8255P"
            },
            {
              "status": "affected",
              "version": "QAM8295P"
            },
            {
              "status": "affected",
              "version": "QAMSRV1H"
            },
            {
              "status": "affected",
              "version": "QAMSRV1M"
            },
            {
              "status": "affected",
              "version": "QCA6574AU"
            },
            {
              "status": "affected",
              "version": "QCA6595"
            },
            {
              "status": "affected",
              "version": "QCA6688AQ"
            },
            {
              "status": "affected",
              "version": "QCA6696"
            },
            {
              "status": "affected",
              "version": "QCA6698AQ"
            },
            {
              "status": "affected",
              "version": "QCA6797AQ"
            },
            {
              "status": "affected",
              "version": "QCA8695AU"
            },
            {
              "status": "affected",
              "version": "QCM2290"
            },
            {
              "status": "affected",
              "version": "QCM4325"
            },
            {
              "status": "affected",
              "version": "QCM4490"
            },
            {
              "status": "affected",
              "version": "QCM5430"
            },
            {
              "status": "affected",
              "version": "QCM6490"
            },
            {
              "status": "affected",
              "version": "QCM8838"
            },
            {
              "status": "affected",
              "version": "QCS2290"
            },
            {
              "status": "affected",
              "version": "QCS4290"
            },
            {
              "status": "affected",
              "version": "QCS4490"
            },
            {
              "status": "affected",
              "version": "QLN1083BD"
            },
            {
              "status": "affected",
              "version": "QLN1086BD"
            },
            {
              "status": "affected",
              "version": "QPA1083BD"
            },
            {
              "status": "affected",
              "version": "QPA1086BD"
            },
            {
              "status": "affected",
              "version": "Qualcomm Video Collaboration VC3 Platform"
            },
            {
              "status": "affected",
              "version": "QXM1093"
            },
            {
              "status": "affected",
              "version": "QXM1094"
            },
            {
              "status": "affected",
              "version": "QXM1095"
            },
            {
              "status": "affected",
              "version": "QXM1096"
            },
            {
              "status": "affected",
              "version": "SA6155P"
            },
            {
              "status": "affected",
              "version": "SA7255P"
            },
            {
              "status": "affected",
              "version": "SA7775P"
            },
            {
              "status": "affected",
              "version": "SA8155P"
            },
            {
              "status": "affected",
              "version": "SA8195P"
            },
            {
              "status": "affected",
              "version": "SA8255P"
            },
            {
              "status": "affected",
              "version": "SA8295P"
            },
            {
              "status": "affected",
              "version": "SA8620P"
            },
            {
              "status": "affected",
              "version": "SA8770P"
            },
            {
              "status": "affected",
              "version": "SA9000P"
            },
            {
              "status": "affected",
              "version": "SAR2130P"
            },
            {
              "status": "affected",
              "version": "SC8380XP"
            },
            {
              "status": "affected",
              "version": "SD662"
            },
            {
              "status": "affected",
              "version": "SD865 5G"
            },
            {
              "status": "affected",
              "version": "SDR753"
            },
            {
              "status": "affected",
              "version": "SM6225P"
            },
            {
              "status": "affected",
              "version": "SM7525"
            },
            {
              "status": "affected",
              "version": "SM7550"
            },
            {
              "status": "affected",
              "version": "SM7550P"
            },
            {
              "status": "affected",
              "version": "SM8550P"
            },
            {
              "status": "affected",
              "version": "Snapdragon 4 Gen 1 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 460 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 480 5G Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 480+ 5G Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 662 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 680 4G Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 685 4G Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 695 5G Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 8 Elite"
            },
            {
              "status": "affected",
              "version": "Snapdragon 8 Gen 2 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 8+ Gen 2 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon AR1 Gen 1 Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon XR2 5G Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon XR2+ Gen 1 Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon Wear Elite platform"
            },
            {
              "status": "affected",
              "version": "SRV1H"
            },
            {
              "status": "affected",
              "version": "SRV1M"
            },
            {
              "status": "affected",
              "version": "SXR2230P"
            },
            {
              "status": "affected",
              "version": "SXR2330P"
            },
            {
              "status": "affected",
              "version": "SXR2350P"
            },
            {
              "status": "affected",
              "version": "Themisto"
            },
            {
              "status": "affected",
              "version": "WCD9370"
            },
            {
              "status": "affected",
              "version": "WCD9371"
            },
            {
              "status": "affected",
              "version": "WCD9375"
            },
            {
              "status": "affected",
              "version": "WCD9378"
            },
            {
              "status": "affected",
              "version": "WCD9380"
            },
            {
              "status": "affected",
              "version": "WCD9385"
            },
            {
              "status": "affected",
              "version": "WCD9390"
            },
            {
              "status": "affected",
              "version": "WCD9395"
            },
            {
              "status": "affected",
              "version": "WCN3910"
            },
            {
              "status": "affected",
              "version": "WCN3950"
            },
            {
              "status": "affected",
              "version": "WCN3988"
            },
            {
              "status": "affected",
              "version": "WCN6450"
            },
            {
              "status": "affected",
              "version": "WCN6650"
            },
            {
              "status": "affected",
              "version": "WCN6755"
            },
            {
              "status": "affected",
              "version": "WCN7860"
            },
            {
              "status": "affected",
              "version": "WCN7861"
            },
            {
              "status": "affected",
              "version": "WCN7881"
            },
            {
              "status": "affected",
              "version": "WSA8810"
            },
            {
              "status": "affected",
              "version": "WSA8815"
            },
            {
              "status": "affected",
              "version": "WSA8830"
            },
            {
              "status": "affected",
              "version": "WSA8832"
            },
            {
              "status": "affected",
              "version": "WSA8835"
            },
            {
              "status": "affected",
              "version": "WSA8840"
            },
            {
              "status": "affected",
              "version": "WSA8845"
            },
            {
              "status": "affected",
              "version": "WSA8845H"
            },
            {
              "status": "affected",
              "version": "X1E80100"
            },
            {
              "status": "affected",
              "version": "XRV7209"
            },
            {
              "status": "affected",
              "version": "XRV9209"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Memory Corruption when handling flash commands due to outdated LED count values being used after userspace modification."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787: Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-06T20:09:35.999Z",
        "orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
        "shortName": "qualcomm"
      },
      "references": [
        {
          "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2026-bulletin.html"
        }
      ],
      "title": "Out-of-bounds Write in Camera Driver"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
    "assignerShortName": "qualcomm",
    "cveId": "CVE-2026-21369",
    "datePublished": "2026-07-06T20:09:35.999Z",
    "dateReserved": "2025-12-17T04:35:45.742Z",
    "dateUpdated": "2026-07-07T13:10:43.683Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-21369",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-07-07T03:56:29.211167Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-07-06T20:54:41.991Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "platforms": [
                "Snapdragon Auto",
                "Snapdragon Compute",
                "Snapdragon Consumer IOT",
                "Snapdragon Industrial IOT",
                "Snapdragon Mobile",
                "Snapdragon Wearables"
              ],
              "product": "Snapdragon",
              "vendor": "Qualcomm, Inc.",
              "versions": [
                {
                  "status": "affected",
                  "version": "FastConnect 6200"
                },
                {
                  "status": "affected",
                  "version": "FastConnect 6700"
                },
                {
                  "status": "affected",
                  "version": "FastConnect 6900"
                },
                {
                  "status": "affected",
                  "version": "FastConnect 7800"
                },
                {
                  "status": "affected",
                  "version": "G1 Gen 1"
                },
                {
                  "status": "affected",
                  "version": "G3x Gen 2"
                },
                {
                  "status": "affected",
                  "version": "IQ9 Series Platform"
                },
                {
                  "status": "affected",
                  "version": "Kalpeni"
                },
                {
                  "status": "affected",
                  "version": "LeMans_AU_LGIT"
                },
                {
                  "status": "affected",
                  "version": "LeMansAU"
                },
                {
                  "status": "affected",
                  "version": "Pandeiro"
                },
                {
                  "status": "affected",
                  "version": "QAM8255P"
                },
                {
                  "status": "affected",
                  "version": "QAM8295P"
                },
                {
                  "status": "affected",
                  "version": "QAMSRV1H"
                },
                {
                  "status": "affected",
                  "version": "QAMSRV1M"
                },
                {
                  "status": "affected",
                  "version": "QCA6574AU"
                },
                {
                  "status": "affected",
                  "version": "QCA6595"
                },
                {
                  "status": "affected",
                  "version": "QCA6688AQ"
                },
                {
                  "status": "affected",
                  "version": "QCA6696"
                },
                {
                  "status": "affected",
                  "version": "QCA6698AQ"
                },
                {
                  "status": "affected",
                  "version": "QCA6797AQ"
                },
                {
                  "status": "affected",
                  "version": "QCA8695AU"
                },
                {
                  "status": "affected",
                  "version": "QCM2290"
                },
                {
                  "status": "affected",
                  "version": "QCM4325"
                },
                {
                  "status": "affected",
                  "version": "QCM4490"
                },
                {
                  "status": "affected",
                  "version": "QCM5430"
                },
                {
                  "status": "affected",
                  "version": "QCM6490"
                },
                {
                  "status": "affected",
                  "version": "QCM8838"
                },
                {
                  "status": "affected",
                  "version": "QCS2290"
                },
                {
                  "status": "affected",
                  "version": "QCS4290"
                },
                {
                  "status": "affected",
                  "version": "QCS4490"
                },
                {
                  "status": "affected",
                  "version": "QLN1083BD"
                },
                {
                  "status": "affected",
                  "version": "QLN1086BD"
                },
                {
                  "status": "affected",
                  "version": "QPA1083BD"
                },
                {
                  "status": "affected",
                  "version": "QPA1086BD"
                },
                {
                  "status": "affected",
                  "version": "Qualcomm Video Collaboration VC3 Platform"
                },
                {
                  "status": "affected",
                  "version": "QXM1093"
                },
                {
                  "status": "affected",
                  "version": "QXM1094"
                },
                {
                  "status": "affected",
                  "version": "QXM1095"
                },
                {
                  "status": "affected",
                  "version": "QXM1096"
                },
                {
                  "status": "affected",
                  "version": "SA6155P"
                },
                {
                  "status": "affected",
                  "version": "SA7255P"
                },
                {
                  "status": "affected",
                  "version": "SA7775P"
                },
                {
                  "status": "affected",
                  "version": "SA8155P"
                },
                {
                  "status": "affected",
                  "version": "SA8195P"
                },
                {
                  "status": "affected",
                  "version": "SA8255P"
                },
                {
                  "status": "affected",
                  "version": "SA8295P"
                },
                {
                  "status": "affected",
                  "version": "SA8620P"
                },
                {
                  "status": "affected",
                  "version": "SA8770P"
                },
                {
                  "status": "affected",
                  "version": "SA9000P"
                },
                {
                  "status": "affected",
                  "version": "SAR2130P"
                },
                {
                  "status": "affected",
                  "version": "SC8380XP"
                },
                {
                  "status": "affected",
                  "version": "SD662"
                },
                {
                  "status": "affected",
                  "version": "SD865 5G"
                },
                {
                  "status": "affected",
                  "version": "SDR753"
                },
                {
                  "status": "affected",
                  "version": "SM6225P"
                },
                {
                  "status": "affected",
                  "version": "SM7525"
                },
                {
                  "status": "affected",
                  "version": "SM7550"
                },
                {
                  "status": "affected",
                  "version": "SM7550P"
                },
                {
                  "status": "affected",
                  "version": "SM8550P"
                },
                {
                  "status": "affected",
                  "version": "Snapdragon 4 Gen 1 Mobile Platform"
                },
                {
                  "status": "affected",
                  "version": "Snapdragon 460 Mobile Platform"
                },
                {
                  "status": "affected",
                  "version": "Snapdragon 480 5G Mobile Platform"
                },
                {
                  "status": "affected",
                  "version": "Snapdragon 480+ 5G Mobile Platform"
                },
                {
                  "status": "affected",
                  "version": "Snapdragon 662 Mobile Platform"
                },
                {
                  "status": "affected",
                  "version": "Snapdragon 680 4G Mobile Platform"
                },
                {
                  "status": "affected",
                  "version": "Snapdragon 685 4G Mobile Platform"
                },
                {
                  "status": "affected",
                  "version": "Snapdragon 695 5G Mobile Platform"
                },
                {
                  "status": "affected",
                  "version": "Snapdragon 8 Elite"
                },
                {
                  "status": "affected",
                  "version": "Snapdragon 8 Gen 2 Mobile Platform"
                },
                {
                  "status": "affected",
                  "version": "Snapdragon 8+ Gen 2 Mobile Platform"
                },
                {
                  "status": "affected",
                  "version": "Snapdragon AR1 Gen 1 Platform"
                },
                {
                  "status": "affected",
                  "version": "Snapdragon XR2 5G Platform"
                },
                {
                  "status": "affected",
                  "version": "Snapdragon XR2+ Gen 1 Platform"
                },
                {
                  "status": "affected",
                  "version": "Snapdragon Wear Elite platform"
                },
                {
                  "status": "affected",
                  "version": "SRV1H"
                },
                {
                  "status": "affected",
                  "version": "SRV1M"
                },
                {
                  "status": "affected",
                  "version": "SXR2230P"
                },
                {
                  "status": "affected",
                  "version": "SXR2330P"
                },
                {
                  "status": "affected",
                  "version": "SXR2350P"
                },
                {
                  "status": "affected",
                  "version": "Themisto"
                },
                {
                  "status": "affected",
                  "version": "WCD9370"
                },
                {
                  "status": "affected",
                  "version": "WCD9371"
                },
                {
                  "status": "affected",
                  "version": "WCD9375"
                },
                {
                  "status": "affected",
                  "version": "WCD9378"
                },
                {
                  "status": "affected",
                  "version": "WCD9380"
                },
                {
                  "status": "affected",
                  "version": "WCD9385"
                },
                {
                  "status": "affected",
                  "version": "WCD9390"
                },
                {
                  "status": "affected",
                  "version": "WCD9395"
                },
                {
                  "status": "affected",
                  "version": "WCN3910"
                },
                {
                  "status": "affected",
                  "version": "WCN3950"
                },
                {
                  "status": "affected",
                  "version": "WCN3988"
                },
                {
                  "status": "affected",
                  "version": "WCN6450"
                },
                {
                  "status": "affected",
                  "version": "WCN6650"
                },
                {
                  "status": "affected",
                  "version": "WCN6755"
                },
                {
                  "status": "affected",
                  "version": "WCN7860"
                },
                {
                  "status": "affected",
                  "version": "WCN7861"
                },
                {
                  "status": "affected",
                  "version": "WCN7881"
                },
                {
                  "status": "affected",
                  "version": "WSA8810"
                },
                {
                  "status": "affected",
                  "version": "WSA8815"
                },
                {
                  "status": "affected",
                  "version": "WSA8830"
                },
                {
                  "status": "affected",
                  "version": "WSA8832"
                },
                {
                  "status": "affected",
                  "version": "WSA8835"
                },
                {
                  "status": "affected",
                  "version": "WSA8840"
                },
                {
                  "status": "affected",
                  "version": "WSA8845"
                },
                {
                  "status": "affected",
                  "version": "WSA8845H"
                },
                {
                  "status": "affected",
                  "version": "X1E80100"
                },
                {
                  "status": "affected",
                  "version": "XRV7209"
                },
                {
                  "status": "affected",
                  "version": "XRV9209"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Memory Corruption when handling flash commands due to outdated LED count values being used after userspace modification."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "LOCAL",
                "availabilityImpact": "LOW",
                "baseScore": 5.3,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "LOW",
                "integrityImpact": "LOW",
                "privilegesRequired": "LOW",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-787",
                  "description": "CWE-787: Out-of-bounds Write",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-07-06T20:09:35.999Z",
            "orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
            "shortName": "qualcomm"
          },
          "references": [
            {
              "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2026-bulletin.html"
            }
          ],
          "title": "Out-of-bounds Write in Camera Driver"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
        "assignerShortName": "qualcomm",
        "cveId": "CVE-2026-21369",
        "datePublished": "2026-07-06T20:09:35.999Z",
        "dateReserved": "2025-12-17T04:35:45.742Z",
        "dateUpdated": "2026-07-07T13:10:43.683Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON
Events included in the timeline

Loading timeline…


    Loading…

    Loading…

    Loading…

    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.