Untriaged
Permalink
CVE-2026-21381
7.6 HIGH
- CVSS version: 3.1
- Attack vector (AV): NETWORK
- Attack complexity (AC): HIGH
- Privileges required (PR): HIGH
- User interaction (UI): REQUIRED
- Scope (S): CHANGED
- Confidentiality impact (C): HIGH
- Integrity impact (I): HIGH
- Availability impact (A): HIGH
Buffer Over-read in WLAN Firmware
Transient DOS when receiving a service data frame with excessive length during device matching over a neighborhood awareness network protocol connection.
Affected products
Snapdragon
- ==QCS8550
- ==QPA1083BD
- ==Snapdragon 7s Gen 3 Mobile Platform
- ==SM6650P
- ==X2000086
- ==Snapdragon 6 Gen 4 Mobile Platform
- ==XRV9209
- ==SM7675
- ==Palawan25
- ==QFW7114
- ==QCA8081
- ==QCN9012
- ==QCC710
- ==SC8380XP
- ==QCC2073
- ==WCD9378C
- ==SM7435
- ==QCN9011
- ==WSA8830
- ==WCN7880
- ==WCN6650
- ==WSA8810
- ==QCA6787AQ
- ==WCN7881
- ==QXM1095
- ==QCC2076
- ==Orne
- ==Milos
- ==XG101039
- ==QXM1093
- ==FastConnect 7800
- ==XG101002
- ==SXR2350P
- ==QCN6274
- ==FastConnect 6200
- ==SM8750P
- ==QCA6777AQ
- ==SXR2250P
- ==WCD9380
- ==WSA8840
- ==WCN7861
- ==QFW7124
- ==Snapdragon X75 5G Modem-RF System
- ==WCN3988
- ==Snapdragon 6 Gen 3 Mobile Platform
- ==QXM1094
- ==SM7635P
- ==Snapdragon AR1+ Gen 1 Platform
- ==X2000090
- ==QXM1096
- ==QCA6797AQ
- ==Snapdragon 8 Elite Gen 5
- ==QCN6224
- ==Snapdragon 8 Gen 3 Mobile Platform
- ==X2000092
- ==SAR1165P
- ==Snapdragon 6 Gen 1 Mobile Platform
- ==FastConnect 6700
- ==SM8650Q
- ==WCD9390
- ==Cologne
- ==QLN1083BD
- ==Snapdragon 8 Elite
- ==FastConnect 6900
- ==SM8635
- ==WCD9395
- ==WSA8835
- ==WSA8845
- ==WCN6755
- ==WSA8845H
- ==WCD9375
- ==WCN6450
- ==SAR2130P
- ==X2000077
- ==G2 Gen 1
- ==AR8035
- ==WCD9370
- ==Snapdragon X72 5G Modem-RF System
- ==QCA8337
- ==QCA6391
- ==QCA6698AU
- ==WSA8832
- ==QXM1086
- ==FWA Gen 3 Ultra Platform
- ==WCD9378
- ==QPA1086BD
- ==SXR2230P
- ==X2000094
- ==Snapdragon AR1 Gen 1 Platform
- ==QLN1086BD
- ==WCD9385
- ==SXR2330P
- ==XRV7209
- ==QXM1083
- ==Pandeiro
- ==WCD9340
- ==Netrani
- ==SM7675P
- ==QMP1000
- ==SM8635P
- ==WSA8815
- ==WCN7860
- ==XG101032