Buffer Over-read in WLAN Firmware_CVE-2026-21367

7.6 / 10

HIGH

CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

Description

Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans.

Basic Information

ID CVE-2026-21367

Source qualcomm

Published Apr 6, 2026 at 15:33

Modified Apr 6, 2026 at 16:22

Affected Product

Vendor Qualcomm, Inc.

Product Snapdragon

Version AR8035

Affected Versions Qualcomm, Inc. Snapdragon AR8035
Qualcomm, Inc. Snapdragon Cologne
Qualcomm, Inc. Snapdragon CSR8811
Qualcomm, Inc. Snapdragon FastConnect 6200
Qualcomm, Inc. Snapdragon FastConnect 6700
Qualcomm, Inc. Snapdragon FastConnect 6900
Qualcomm, Inc. Snapdragon FastConnect 7800
Qualcomm, Inc. Snapdragon FWA Gen 3 Ultra Platform
Qualcomm, Inc. Snapdragon G2 Gen 1
Qualcomm, Inc. Snapdragon Immersive Home 214 Platform
Qualcomm, Inc. Snapdragon Immersive Home 216 Platform
Qualcomm, Inc. Snapdragon Immersive Home 316 Platform
Qualcomm, Inc. Snapdragon Immersive Home 318 Platform
Qualcomm, Inc. Snapdragon IPQ5010
Qualcomm, Inc. Snapdragon IPQ5028
Qualcomm, Inc. Snapdragon IPQ6000
Qualcomm, Inc. Snapdragon IPQ6010
Qualcomm, Inc. Snapdragon IPQ6018
Qualcomm, Inc. Snapdragon IPQ8076
Qualcomm, Inc. Snapdragon IPQ8078
Qualcomm, Inc. Snapdragon IPQ9574
Qualcomm, Inc. Snapdragon Milos
Qualcomm, Inc. Snapdragon Netrani
Qualcomm, Inc. Snapdragon Networking Pro 1200 Platform
Qualcomm, Inc. Snapdragon Networking Pro 1210 Platform
Qualcomm, Inc. Snapdragon Networking Pro 1610 Platform
Qualcomm, Inc. Snapdragon Networking Pro 400 Platform
Qualcomm, Inc. Snapdragon Networking Pro 600 Platform
Qualcomm, Inc. Snapdragon Networking Pro 610 Platform
Qualcomm, Inc. Snapdragon Networking Pro 800 Platform
Qualcomm, Inc. Snapdragon Networking Pro 810 Platform
Qualcomm, Inc. Snapdragon Orne
Qualcomm, Inc. Snapdragon Palawan25
Qualcomm, Inc. Snapdragon Pandeiro
Qualcomm, Inc. Snapdragon QCA4024
Qualcomm, Inc. Snapdragon QCA6391
Qualcomm, Inc. Snapdragon QCA6698AU
Qualcomm, Inc. Snapdragon QCA6777AQ
Qualcomm, Inc. Snapdragon QCA6787AQ
Qualcomm, Inc. Snapdragon QCA6797AQ
Qualcomm, Inc. Snapdragon QCA8075
Qualcomm, Inc. Snapdragon QCA8081
Qualcomm, Inc. Snapdragon QCA8082
Qualcomm, Inc. Snapdragon QCA8084
Qualcomm, Inc. Snapdragon QCA8085
Qualcomm, Inc. Snapdragon QCA8337
Qualcomm, Inc. Snapdragon QCA8386
Qualcomm, Inc. Snapdragon QCA9888
Qualcomm, Inc. Snapdragon QCA9889
Qualcomm, Inc. Snapdragon QCC2073
Qualcomm, Inc. Snapdragon QCC2076
Qualcomm, Inc. Snapdragon QCC710
Qualcomm, Inc. Snapdragon QCM4490
Qualcomm, Inc. Snapdragon QCN5022
Qualcomm, Inc. Snapdragon QCN5024
Qualcomm, Inc. Snapdragon QCN5052
Qualcomm, Inc. Snapdragon QCN5122
Qualcomm, Inc. Snapdragon QCN5124
Qualcomm, Inc. Snapdragon QCN5152
Qualcomm, Inc. Snapdragon QCN5154
Qualcomm, Inc. Snapdragon QCN5164
Qualcomm, Inc. Snapdragon QCN6023
Qualcomm, Inc. Snapdragon QCN6024
Qualcomm, Inc. Snapdragon QCN6122
Qualcomm, Inc. Snapdragon QCN6132
Qualcomm, Inc. Snapdragon QCN6224
Qualcomm, Inc. Snapdragon QCN6274
Qualcomm, Inc. Snapdragon QCN9000
Qualcomm, Inc. Snapdragon QCN9011
Qualcomm, Inc. Snapdragon QCN9012
Qualcomm, Inc. Snapdragon QCN9022
Qualcomm, Inc. Snapdragon QCN9024
Qualcomm, Inc. Snapdragon QCN9070
Qualcomm, Inc. Snapdragon QCN9100
Qualcomm, Inc. Snapdragon QCN9274
Qualcomm, Inc. Snapdragon QCS4490
Qualcomm, Inc. Snapdragon QCS8550
Qualcomm, Inc. Snapdragon QFW7114
Qualcomm, Inc. Snapdragon QFW7124
Qualcomm, Inc. Snapdragon QLN1083BD
Qualcomm, Inc. Snapdragon QLN1086BD
Qualcomm, Inc. Snapdragon QMP1000
Qualcomm, Inc. Snapdragon QPA1083BD
Qualcomm, Inc. Snapdragon QPA1086BD
Qualcomm, Inc. Snapdragon QXM1093
Qualcomm, Inc. Snapdragon QXM1094
Qualcomm, Inc. Snapdragon QXM1095
Qualcomm, Inc. Snapdragon QXM1096
Qualcomm, Inc. Snapdragon SAR2130P
Qualcomm, Inc. Snapdragon SC8380XP
Qualcomm, Inc. Snapdragon SD 8 Gen1 5G
Qualcomm, Inc. Snapdragon SM6650P
Qualcomm, Inc. Snapdragon SM7435
Qualcomm, Inc. Snapdragon SM7635P
Qualcomm, Inc. Snapdragon SM7675
Qualcomm, Inc. Snapdragon SM7675P
Qualcomm, Inc. Snapdragon SM8475P
Qualcomm, Inc. Snapdragon SM8635
Qualcomm, Inc. Snapdragon SM8635P
Qualcomm, Inc. Snapdragon SM8650Q
Qualcomm, Inc. Snapdragon SM8750P
Qualcomm, Inc. Snapdragon Snapdragon 6 Gen 1 Mobile Platform
Qualcomm, Inc. Snapdragon Snapdragon 6 Gen 3 Mobile Platform
Qualcomm, Inc. Snapdragon Snapdragon 6 Gen 4 Mobile Platform
Qualcomm, Inc. Snapdragon Snapdragon 7 Gen 1 Mobile Platform
Qualcomm, Inc. Snapdragon Snapdragon 7+ Gen 2 Mobile Platform
Qualcomm, Inc. Snapdragon Snapdragon 7s Gen 3 Mobile Platform
Qualcomm, Inc. Snapdragon Snapdragon 8 Elite
Qualcomm, Inc. Snapdragon Snapdragon 8 Elite Gen 5
Qualcomm, Inc. Snapdragon Snapdragon 8 Gen 1 Mobile Platform
Qualcomm, Inc. Snapdragon Snapdragon 8 Gen 3 Mobile Platform
Qualcomm, Inc. Snapdragon Snapdragon 8+ Gen 1 Mobile Platform
Qualcomm, Inc. Snapdragon Snapdragon X72 5G Modem-RF System
Qualcomm, Inc. Snapdragon Snapdragon X75 5G Modem-RF System
Qualcomm, Inc. Snapdragon WCD9340
Qualcomm, Inc. Snapdragon WCD9370
Qualcomm, Inc. Snapdragon WCD9375
Qualcomm, Inc. Snapdragon WCD9378
Qualcomm, Inc. Snapdragon WCD9378C
Qualcomm, Inc. Snapdragon WCD9380
Qualcomm, Inc. Snapdragon WCD9385
Qualcomm, Inc. Snapdragon WCD9390
Qualcomm, Inc. Snapdragon WCD9395
Qualcomm, Inc. Snapdragon WCN3950
Qualcomm, Inc. Snapdragon WCN3988
Qualcomm, Inc. Snapdragon WCN6450
Qualcomm, Inc. Snapdragon WCN6650
Qualcomm, Inc. Snapdragon WCN6755
Qualcomm, Inc. Snapdragon WCN7860
Qualcomm, Inc. Snapdragon WCN7861
Qualcomm, Inc. Snapdragon WCN7880
Qualcomm, Inc. Snapdragon WCN7881
Qualcomm, Inc. Snapdragon WSA8810
Qualcomm, Inc. Snapdragon WSA8815
Qualcomm, Inc. Snapdragon WSA8830
Qualcomm, Inc. Snapdragon WSA8832
Qualcomm, Inc. Snapdragon WSA8835
Qualcomm, Inc. Snapdragon WSA8840
Qualcomm, Inc. Snapdragon WSA8845
Qualcomm, Inc. Snapdragon WSA8845H
Qualcomm, Inc. Snapdragon X2000077
Qualcomm, Inc. Snapdragon X2000086
Qualcomm, Inc. Snapdragon X2000090
Qualcomm, Inc. Snapdragon X2000092
Qualcomm, Inc. Snapdragon X2000094
Qualcomm, Inc. Snapdragon XG101002
Qualcomm, Inc. Snapdragon XG101032
Qualcomm, Inc. Snapdragon XG101039
Qualcomm, Inc. Snapdragon XRV7209
Qualcomm, Inc. Snapdragon XRV9209

CWE Classification

CWE-126

References

docs.qualcomm.com /product/publicresources/securitybulletin/april-2026-bulletin.html

{
    "lastseen": "",
    "description": "Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans.",
    "published": "2026-04-06T15:33:46.114Z",
    "modified": "2026-04-06T16:22:15.658Z",
    "type": "cve",
    "title": "Buffer Over-read in WLAN Firmware",
    "source": "qualcomm",
    "references": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html",
    "id": "CVE-2026-21367",
    "bulletinFamily": "",
    "cwe": [
        "CWE-126"
    ],
    "cvelist": null,
    "sourceData": "Qualcomm, Inc. Snapdragon AR8035\nQualcomm, Inc. Snapdragon Cologne\nQualcomm, Inc. Snapdragon CSR8811\nQualcomm, Inc. Snapdragon FastConnect 6200\nQualcomm, Inc. Snapdragon FastConnect 6700\nQualcomm, Inc. Snapdragon FastConnect 6900\nQualcomm, Inc. Snapdragon FastConnect 7800\nQualcomm, Inc. Snapdragon FWA Gen 3 Ultra Platform\nQualcomm, Inc. Snapdragon G2 Gen 1\nQualcomm, Inc. Snapdragon Immersive Home 214 Platform\nQualcomm, Inc. Snapdragon Immersive Home 216 Platform\nQualcomm, Inc. Snapdragon Immersive Home 316 Platform\nQualcomm, Inc. Snapdragon Immersive Home 318 Platform\nQualcomm, Inc. Snapdragon IPQ5010\nQualcomm, Inc. Snapdragon IPQ5028\nQualcomm, Inc. Snapdragon IPQ6000\nQualcomm, Inc. Snapdragon IPQ6010\nQualcomm, Inc. Snapdragon IPQ6018\nQualcomm, Inc. Snapdragon IPQ8076\nQualcomm, Inc. Snapdragon IPQ8078\nQualcomm, Inc. Snapdragon IPQ9574\nQualcomm, Inc. Snapdragon Milos\nQualcomm, Inc. Snapdragon Netrani\nQualcomm, Inc. Snapdragon Networking Pro 1200 Platform\nQualcomm, Inc. Snapdragon Networking Pro 1210 Platform\nQualcomm, Inc. Snapdragon Networking Pro 1610 Platform\nQualcomm, Inc. Snapdragon Networking Pro 400 Platform\nQualcomm, Inc. Snapdragon Networking Pro 600 Platform\nQualcomm, Inc. Snapdragon Networking Pro 610 Platform\nQualcomm, Inc. Snapdragon Networking Pro 800 Platform\nQualcomm, Inc. Snapdragon Networking Pro 810 Platform\nQualcomm, Inc. Snapdragon Orne\nQualcomm, Inc. Snapdragon Palawan25\nQualcomm, Inc. Snapdragon Pandeiro\nQualcomm, Inc. Snapdragon QCA4024\nQualcomm, Inc. Snapdragon QCA6391\nQualcomm, Inc. Snapdragon QCA6698AU\nQualcomm, Inc. Snapdragon QCA6777AQ\nQualcomm, Inc. Snapdragon QCA6787AQ\nQualcomm, Inc. Snapdragon QCA6797AQ\nQualcomm, Inc. Snapdragon QCA8075\nQualcomm, Inc. Snapdragon QCA8081\nQualcomm, Inc. Snapdragon QCA8082\nQualcomm, Inc. Snapdragon QCA8084\nQualcomm, Inc. Snapdragon QCA8085\nQualcomm, Inc. Snapdragon QCA8337\nQualcomm, Inc. Snapdragon QCA8386\nQualcomm, Inc. Snapdragon QCA9888\nQualcomm, Inc. Snapdragon QCA9889\nQualcomm, Inc. Snapdragon QCC2073\nQualcomm, Inc. Snapdragon QCC2076\nQualcomm, Inc. Snapdragon QCC710\nQualcomm, Inc. Snapdragon QCM4490\nQualcomm, Inc. Snapdragon QCN5022\nQualcomm, Inc. Snapdragon QCN5024\nQualcomm, Inc. Snapdragon QCN5052\nQualcomm, Inc. Snapdragon QCN5122\nQualcomm, Inc. Snapdragon QCN5124\nQualcomm, Inc. Snapdragon QCN5152\nQualcomm, Inc. Snapdragon QCN5154\nQualcomm, Inc. Snapdragon QCN5164\nQualcomm, Inc. Snapdragon QCN6023\nQualcomm, Inc. Snapdragon QCN6024\nQualcomm, Inc. Snapdragon QCN6122\nQualcomm, Inc. Snapdragon QCN6132\nQualcomm, Inc. Snapdragon QCN6224\nQualcomm, Inc. Snapdragon QCN6274\nQualcomm, Inc. Snapdragon QCN9000\nQualcomm, Inc. Snapdragon QCN9011\nQualcomm, Inc. Snapdragon QCN9012\nQualcomm, Inc. Snapdragon QCN9022\nQualcomm, Inc. Snapdragon QCN9024\nQualcomm, Inc. Snapdragon QCN9070\nQualcomm, Inc. Snapdragon QCN9100\nQualcomm, Inc. Snapdragon QCN9274\nQualcomm, Inc. Snapdragon QCS4490\nQualcomm, Inc. Snapdragon QCS8550\nQualcomm, Inc. Snapdragon QFW7114\nQualcomm, Inc. Snapdragon QFW7124\nQualcomm, Inc. Snapdragon QLN1083BD\nQualcomm, Inc. Snapdragon QLN1086BD\nQualcomm, Inc. Snapdragon QMP1000\nQualcomm, Inc. Snapdragon QPA1083BD\nQualcomm, Inc. Snapdragon QPA1086BD\nQualcomm, Inc. Snapdragon QXM1093\nQualcomm, Inc. Snapdragon QXM1094\nQualcomm, Inc. Snapdragon QXM1095\nQualcomm, Inc. Snapdragon QXM1096\nQualcomm, Inc. Snapdragon SAR2130P\nQualcomm, Inc. Snapdragon SC8380XP\nQualcomm, Inc. Snapdragon SD 8 Gen1 5G\nQualcomm, Inc. Snapdragon SM6650P\nQualcomm, Inc. Snapdragon SM7435\nQualcomm, Inc. Snapdragon SM7635P\nQualcomm, Inc. Snapdragon SM7675\nQualcomm, Inc. Snapdragon SM7675P\nQualcomm, Inc. Snapdragon SM8475P\nQualcomm, Inc. Snapdragon SM8635\nQualcomm, Inc. Snapdragon SM8635P\nQualcomm, Inc. Snapdragon SM8650Q\nQualcomm, Inc. Snapdragon SM8750P\nQualcomm, Inc. Snapdragon Snapdragon 6 Gen 1 Mobile Platform\nQualcomm, Inc. Snapdragon Snapdragon 6 Gen 3 Mobile Platform\nQualcomm, Inc. Snapdragon Snapdragon 6 Gen 4 Mobile Platform\nQualcomm, Inc. Snapdragon Snapdragon 7 Gen 1 Mobile Platform\nQualcomm, Inc. Snapdragon Snapdragon 7+ Gen 2 Mobile Platform\nQualcomm, Inc. Snapdragon Snapdragon 7s Gen 3 Mobile Platform\nQualcomm, Inc. Snapdragon Snapdragon 8 Elite\nQualcomm, Inc. Snapdragon Snapdragon 8 Elite Gen 5\nQualcomm, Inc. Snapdragon Snapdragon 8 Gen 1 Mobile Platform\nQualcomm, Inc. Snapdragon Snapdragon 8 Gen 3 Mobile Platform\nQualcomm, Inc. Snapdragon Snapdragon 8+ Gen 1 Mobile Platform\nQualcomm, Inc. Snapdragon Snapdragon X72 5G Modem-RF System\nQualcomm, Inc. Snapdragon Snapdragon X75 5G Modem-RF System\nQualcomm, Inc. Snapdragon WCD9340\nQualcomm, Inc. Snapdragon WCD9370\nQualcomm, Inc. Snapdragon WCD9375\nQualcomm, Inc. Snapdragon WCD9378\nQualcomm, Inc. Snapdragon WCD9378C\nQualcomm, Inc. Snapdragon WCD9380\nQualcomm, Inc. Snapdragon WCD9385\nQualcomm, Inc. Snapdragon WCD9390\nQualcomm, Inc. Snapdragon WCD9395\nQualcomm, Inc. Snapdragon WCN3950\nQualcomm, Inc. Snapdragon WCN3988\nQualcomm, Inc. Snapdragon WCN6450\nQualcomm, Inc. Snapdragon WCN6650\nQualcomm, Inc. Snapdragon WCN6755\nQualcomm, Inc. Snapdragon WCN7860\nQualcomm, Inc. Snapdragon WCN7861\nQualcomm, Inc. Snapdragon WCN7880\nQualcomm, Inc. Snapdragon WCN7881\nQualcomm, Inc. Snapdragon WSA8810\nQualcomm, Inc. Snapdragon WSA8815\nQualcomm, Inc. Snapdragon WSA8830\nQualcomm, Inc. Snapdragon WSA8832\nQualcomm, Inc. Snapdragon WSA8835\nQualcomm, Inc. Snapdragon WSA8840\nQualcomm, Inc. Snapdragon WSA8845\nQualcomm, Inc. Snapdragon WSA8845H\nQualcomm, Inc. Snapdragon X2000077\nQualcomm, Inc. Snapdragon X2000086\nQualcomm, Inc. Snapdragon X2000090\nQualcomm, Inc. Snapdragon X2000092\nQualcomm, Inc. Snapdragon X2000094\nQualcomm, Inc. Snapdragon XG101002\nQualcomm, Inc. Snapdragon XG101032\nQualcomm, Inc. Snapdragon XG101039\nQualcomm, Inc. Snapdragon XRV7209\nQualcomm, Inc. Snapdragon XRV9209",
    "sourceHref": "",
    "cvss": {
        "score": 7.6,
        "severity": "HIGH",
        "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Snapdragon",
    "version": "AR8035",
    "vendor": "Qualcomm, Inc.",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}