CVE-2026-21368
5.3 MoyenneDescription
Memory Corruption when parsing jpeg commands due to unaccounted extra writes to the buffer during validation checks.
Produits concernés
- Qualcomm, Inc. Snapdragon
- Qualcomm fastconnect 6700 firmware
- Qualcomm fastconnect 6900 firmware
- Qualcomm fastconnect 7800 firmware
- Qualcomm g3x gen 2 firmware
- Qualcomm iq-9075 firmware
- Qualcomm sm8550p firmware
- Qualcomm snapdragon 4 gen 2 mobile platform firmware
- Qualcomm snapdragon 460 mobile platform firmware
- Qualcomm snapdragon 6 gen 1 mobile platform firmware
- Qualcomm snapdragon 6 gen 3 mobile platform firmware
- Qualcomm snapdragon 662 mobile platform firmware
- Qualcomm snapdragon 7 gen 1 mobile platform firmware
- Qualcomm snapdragon 8 elite firmware
- Qualcomm snapdragon 8 gen 1 mobile platform firmware
- Qualcomm snapdragon 8 gen 2 mobile platform firmware
- Qualcomm snapdragon 8\+ gen 2 mobile platform firmware
- Qualcomm snapdragon ar1 gen 1 platform firmware
- Qualcomm snapdragon xr2 5g platform firmware
- Qualcomm snapdragon xr2\+ gen 1 platform firmware
- Qualcomm srv1h firmware
- Qualcomm srv1m firmware
- Qualcomm sxr2230p firmware
- Qualcomm sxr2330p firmware
- Qualcomm sxr2350p firmware
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 5.3 Moyenne | product-security@qualcomm.com | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L |
| 3.1 | 5.3 Moyenne | nvd@nist.gov (NVD) | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |