1. Home
  2. CVE Database
  3. CVE-2026-21372
HIGH · 7.8

CVE-2026-21372

Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations.

Vulnerability Description

Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
QualcommX2000094 Firmware-
QualcommX2000094-
QualcommXg101002 Firmware-
QualcommXg101002-
QualcommXg101032 Firmware-
QualcommXg101032-
QualcommXg101039 Firmware-
QualcommXg101039-
QualcommX2000092 Firmware-
QualcommX2000092-
QualcommX2000090 Firmware-
QualcommX2000090-
QualcommX2000086 Firmware-
QualcommX2000086-
QualcommX2000077 Firmware-
QualcommX2000077-
QualcommWsa8845H Firmware-
QualcommWsa8845H-
QualcommWsa8845 Firmware-
QualcommWsa8845-

Related Weaknesses (CWE)

CWE-122

References

FAQ

What is CVE-2026-21372?

CVE-2026-21372 is a vulnerability with a CVSS score of 7.8 (HIGH). Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations.

How severe is CVE-2026-21372?

CVE-2026-21372 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-21372?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm X2000094 Firmware, Qualcomm X2000094, Qualcomm Xg101002 Firmware, Qualcomm Xg101002, Qualcomm Xg101032 Firmware.