CVE-2026-21371 — HIGH (7.8)

Vulnerability Description

Memory Corruption when retrieving output buffer with insufficient size validation.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Qualcomm	Snapdragon 8Cx Compute Platform \"Poipu Pro\" Firmware	-
Qualcomm	Snapdragon 8Cx Compute Platform \"Poipu Pro\"	-
Qualcomm	Snapdragon 8Cx Gen 2 5G Compute Platform Firmware	-
Qualcomm	Snapdragon 8Cx Gen 2 5G Compute Platform	-
Qualcomm	Snapdragon 8Cx Gen 2 5G Compute Platform \"Poipu Pro\" Firmware	-
Qualcomm	Snapdragon 8Cx Gen 2 5G Compute Platform \"Poipu Pro\"	-
Qualcomm	Snapdragon 8Cx Gen 3 Compute Platform Firmware	-
Qualcomm	Snapdragon 8Cx Gen 3 Compute Platform	-
Qualcomm	Wcd9340 Firmware	-
Qualcomm	Wcd9340	-
Qualcomm	Snapdragon 8Cx Compute Platform Firmware	-
Qualcomm	Snapdragon 8Cx Compute Platform	-
Qualcomm	Snapdragon 8C Compute Platform \(Sc8180Xp-Ad\) Firmware	-
Qualcomm	Snapdragon 8C Compute Platform \(Sc8180Xp-Ad\)	-
Qualcomm	Snapdragon 8C Compute Platform Firmware	-
Qualcomm	Snapdragon 8C Compute Platform	-
Qualcomm	Snapdragon 7C\+ Gen 3 Compute Firmware	-
Qualcomm	Snapdragon 7C\+ Gen 3 Compute	-
Qualcomm	Snapdragon 7C Gen 2 Compute Platform Firmware	-
Qualcomm	Snapdragon 7C Gen 2 Compute Platform	-

Related Weaknesses (CWE)

CWE-126

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-buVendor Advisory

FAQ

What is CVE-2026-21371?

CVE-2026-21371 is a vulnerability with a CVSS score of 7.8 (HIGH). Memory Corruption when retrieving output buffer with insufficient size validation.

How severe is CVE-2026-21371?

CVE-2026-21371 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-21371?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Snapdragon 8Cx Compute Platform \"Poipu Pro\" Firmware, Qualcomm Snapdragon 8Cx Compute Platform \"Poipu Pro\", Qualcomm Snapdragon 8Cx Gen 2 5G Compute Platform Firmware, Qualcomm Snapdragon 8Cx Gen 2 5G Compute Platform, Qualcomm Snapdragon 8Cx Gen 2 5G Compute Platform \"Poipu Pro\" Firmware.