Findings

CVE-2026-21372

Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations.

Published Apr 6, 2026 · updated Jun 17, 2026 · qualcomm x2000094 firmware

Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 6, 2026 · NIST NVD

    Detected

    Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations.

  2. Jun 17, 2026 · NIST NVD

    Updated

    Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations.

Affected

  • cpe qualcomm/wcn3988 firmwareversion unspecified
  • cpe qualcomm/wsa8840 firmwareversion unspecified
  • cpe qualcomm/wsa8845 firmwareversion unspecified
  • cpe qualcomm/wsa8845h firmwareversion unspecified
  • cpe qualcomm/x2000077 firmwareversion unspecified
  • cpe qualcomm/x2000086 firmwareversion unspecified
  • cpe qualcomm/x2000090 firmwareversion unspecified
  • cpe qualcomm/x2000092 firmwareversion unspecified
  • cpe qualcomm/x2000094 firmwareversion unspecified
  • cpe qualcomm/xg101002 firmwareversion unspecified
  • cpe qualcomm/xg101032 firmwareversion unspecified
  • cpe qualcomm/xg101039 firmwareversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-21372

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-21372

    Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations.

    nvd.nist.gov

References

CVE-2026-21372 · ZeroDay Findings