Buffer Over-read in Camera_CVE-2026-21375

7.8 / 10

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.

Basic Information

ID CVE-2026-21375

Source qualcomm

Published Apr 6, 2026 at 15:33

Modified Apr 7, 2026 at 03:55

Affected Product

Vendor Qualcomm, Inc.

Product Snapdragon

Version Cologne

Affected Versions Qualcomm, Inc. Snapdragon Cologne
Qualcomm, Inc. Snapdragon FastConnect 6700
Qualcomm, Inc. Snapdragon FastConnect 6900
Qualcomm, Inc. Snapdragon FastConnect 7800
Qualcomm, Inc. Snapdragon QCA0000
Qualcomm, Inc. Snapdragon QCM5430
Qualcomm, Inc. Snapdragon QCM6490
Qualcomm, Inc. Snapdragon Qualcomm Video Collaboration VC3 Platform
Qualcomm, Inc. Snapdragon SC8380XP
Qualcomm, Inc. Snapdragon Snapdragon 460 Mobile Platform
Qualcomm, Inc. Snapdragon Snapdragon 662 Mobile Platform
Qualcomm, Inc. Snapdragon Snapdragon 7c+ Gen 3 Compute
Qualcomm, Inc. Snapdragon Snapdragon 8cx Gen 3 Compute Platform
Qualcomm, Inc. Snapdragon Snapdragon AR1 Gen 1 Platform
Qualcomm, Inc. Snapdragon WCD9370
Qualcomm, Inc. Snapdragon WCD9375
Qualcomm, Inc. Snapdragon WCD9378C
Qualcomm, Inc. Snapdragon WCD9380
Qualcomm, Inc. Snapdragon WCD9385
Qualcomm, Inc. Snapdragon WCN3950
Qualcomm, Inc. Snapdragon WCN3988
Qualcomm, Inc. Snapdragon WSA8830
Qualcomm, Inc. Snapdragon WSA8832
Qualcomm, Inc. Snapdragon WSA8835
Qualcomm, Inc. Snapdragon WSA8840
Qualcomm, Inc. Snapdragon WSA8845
Qualcomm, Inc. Snapdragon WSA8845H
Qualcomm, Inc. Snapdragon X2000077
Qualcomm, Inc. Snapdragon X2000086
Qualcomm, Inc. Snapdragon X2000090
Qualcomm, Inc. Snapdragon X2000092
Qualcomm, Inc. Snapdragon X2000094
Qualcomm, Inc. Snapdragon XG101002
Qualcomm, Inc. Snapdragon XG101032
Qualcomm, Inc. Snapdragon XG101039

CWE Classification

CWE-126

References

docs.qualcomm.com /product/publicresources/securitybulletin/april-2026-bulletin.html

{
    "lastseen": "",
    "description": "Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.",
    "published": "2026-04-06T15:33:51.531Z",
    "modified": "2026-04-07T03:55:52.971Z",
    "type": "cve",
    "title": "Buffer Over-read in Camera",
    "source": "qualcomm",
    "references": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html",
    "id": "CVE-2026-21375",
    "bulletinFamily": "",
    "cwe": [
        "CWE-126"
    ],
    "cvelist": null,
    "sourceData": "Qualcomm, Inc. Snapdragon Cologne\nQualcomm, Inc. Snapdragon FastConnect 6700\nQualcomm, Inc. Snapdragon FastConnect 6900\nQualcomm, Inc. Snapdragon FastConnect 7800\nQualcomm, Inc. Snapdragon QCA0000\nQualcomm, Inc. Snapdragon QCM5430\nQualcomm, Inc. Snapdragon QCM6490\nQualcomm, Inc. Snapdragon Qualcomm Video Collaboration VC3 Platform\nQualcomm, Inc. Snapdragon SC8380XP\nQualcomm, Inc. Snapdragon Snapdragon 460 Mobile Platform\nQualcomm, Inc. Snapdragon Snapdragon 662 Mobile Platform\nQualcomm, Inc. Snapdragon Snapdragon 7c+ Gen 3 Compute\nQualcomm, Inc. Snapdragon Snapdragon 8cx Gen 3 Compute Platform\nQualcomm, Inc. Snapdragon Snapdragon AR1 Gen 1 Platform\nQualcomm, Inc. Snapdragon WCD9370\nQualcomm, Inc. Snapdragon WCD9375\nQualcomm, Inc. Snapdragon WCD9378C\nQualcomm, Inc. Snapdragon WCD9380\nQualcomm, Inc. Snapdragon WCD9385\nQualcomm, Inc. Snapdragon WCN3950\nQualcomm, Inc. Snapdragon WCN3988\nQualcomm, Inc. Snapdragon WSA8830\nQualcomm, Inc. Snapdragon WSA8832\nQualcomm, Inc. Snapdragon WSA8835\nQualcomm, Inc. Snapdragon WSA8840\nQualcomm, Inc. Snapdragon WSA8845\nQualcomm, Inc. Snapdragon WSA8845H\nQualcomm, Inc. Snapdragon X2000077\nQualcomm, Inc. Snapdragon X2000086\nQualcomm, Inc. Snapdragon X2000090\nQualcomm, Inc. Snapdragon X2000092\nQualcomm, Inc. Snapdragon X2000094\nQualcomm, Inc. Snapdragon XG101002\nQualcomm, Inc. Snapdragon XG101032\nQualcomm, Inc. Snapdragon XG101039",
    "sourceHref": "",
    "cvss": {
        "score": 7.8,
        "severity": "HIGH",
        "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Snapdragon",
    "version": "Cologne",
    "vendor": "Qualcomm, Inc.",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}