Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Apr 6, 2026 · NIST NVD

   Detected

   Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.

2. Jun 17, 2026 · NIST NVD

   Updated

   Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.

Affected

• cpe qualcomm/wcd9375 firmwareversion unspecified
• cpe qualcomm/wcd9378c firmwareversion unspecified
• cpe qualcomm/wcd9380 firmwareversion unspecified
• cpe qualcomm/wcd9385 firmwareversion unspecified
• cpe qualcomm/wcn3950 firmwareversion unspecified
• cpe qualcomm/wcn3988 firmwareversion unspecified
• cpe qualcomm/wsa8810 firmwareversion unspecified
• cpe qualcomm/wsa8815 firmwareversion unspecified
• cpe qualcomm/wsa8830 firmwareversion unspecified
• cpe qualcomm/wsa8832 firmwareversion unspecified
• cpe qualcomm/wsa8835 firmwareversion unspecified
• cpe qualcomm/wsa8840 firmwareversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-21378

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-21378

  Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.

  nvd.nist.gov

References

• Vendor Advisory · docs.qualcomm.com