CVE-2026-21369

MEDIUM

Qualcomm, Snapdragon - Out-Of-Bounds Write in Camera Driver

Title source: rule

Memory Corruption when handling flash commands due to outdated LED count values being used after userspace modification.

Core 1

Core References

CVSS v3 5.3

EPSS 0.0006

EPSS Percentile 0.0%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

CWE

CWE-787

Status published

Products (50)

qualcomm/fastconnect_6200_firmware

qualcomm/fastconnect_6700_firmware

qualcomm/fastconnect_6900_firmware

qualcomm/fastconnect_7800_firmware

qualcomm/g1_gen_1_firmware

qualcomm/g3x_gen_2_firmware

qualcomm/iq-9075_firmware

qualcomm/kalpeni_firmware

qualcomm/lemans_au_lgit_firmware

qualcomm/lemansau_firmware

... and 40 more

Published Jul 06, 2026

Tracked Since Jul 07, 2026