CVE-2026-21376
Buffer Over-read in Camera
CVSS Score
7.8
EPSS Score
0.0%
EPSS Percentile
0th
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.
| CWE | CWE-126 |
| Vendor | qualcomm, inc. |
| Product | snapdragon |
| Published | Apr 6, 2026 |
| Last Updated | Apr 7, 2026 |
Stay Ahead of the Next One
Get instant alerts for qualcomm, inc. snapdragon
Be the first to know when new high vulnerabilities affecting qualcomm, inc. snapdragon are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
Qualcomm, Inc. / Snapdragon
AQT1000 Cologne FastConnect 6200 FastConnect 6700 FastConnect 6800 FastConnect 6900 FastConnect 7800 QCA0000 QCA6391 QCA6420 QCA6430 QCM5430 QCM6490 Qualcomm Video Collaboration VC3 Platform SC8380XP SM6250 Snapdragon 460 Mobile Platform Snapdragon 662 Mobile Platform Snapdragon 7c Compute Platform Snapdragon 7c Gen 2 Compute Platform "Rennell Pro" Snapdragon 7c+ Gen 3 Compute Snapdragon 8c Compute Platform "Poipu Lite" Snapdragon 8c Compute Platform (SC8180XP-AD) "Poipu Lite" Snapdragon 8cx Compute Platform Snapdragon 8cx Compute Platform "Poipu Pro" Snapdragon 8cx Gen 2 5G Compute Platform Snapdragon 8cx Gen 2 5G Compute Platform "Poipu Pro" Snapdragon 8cx Gen 3 Compute Platform Snapdragon AR1 Gen 1 Platform WCD9340 WCD9341 WCD9370 WCD9375 WCD9378C WCD9380 WCD9385 WCN3950 WCN3988 WSA8810 WSA8815 WSA8830 WSA8832 WSA8835 WSA8840 WSA8845 WSA8845H X2000077 X2000086 X2000090 X2000092 X2000094 XG101002 XG101032 XG101039