CVE-2026-21375

Buffer Over-read in Camera

State: Published
Severity: 7.8 High
Published: Apr 6, 2026
Updated: Apr 7, 2026
Reserved: Dec 17, 2025

Description

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	qualcomm

Weaknesses

CWE-126 Buffer Over-read

Affected Products

Product	Versions
SnapdragonQualcomm, Inc.	CologneAffected FastConnect 6700Affected FastConnect 6900Affected FastConnect 7800Affected QCA0000Affected QCM5430Affected QCM6490Affected Qualcomm Video Collaboration VC3 PlatformAffected SC8380XPAffected Snapdragon 460 Mobile PlatformAffected Snapdragon 662 Mobile PlatformAffected Snapdragon 7c+ Gen 3 ComputeAffected Snapdragon 8cx Gen 3 Compute PlatformAffected Snapdragon AR1 Gen 1 PlatformAffected WCD9370Affected WCD9375Affected WCD9378CAffected WCD9380Affected WCD9385Affected WCN3950Affected WCN3988Affected WSA8830Affected WSA8832Affected WSA8835Affected WSA8840Affected and 10 more versions

Product

Versions

SnapdragonQualcomm, Inc.

CologneAffected
FastConnect 6700Affected
FastConnect 6900Affected
FastConnect 7800Affected
QCA0000Affected
QCM5430Affected
QCM6490Affected
Qualcomm Video Collaboration VC3 PlatformAffected
SC8380XPAffected
Snapdragon 460 Mobile PlatformAffected
Snapdragon 662 Mobile PlatformAffected
Snapdragon 7c+ Gen 3 ComputeAffected
Snapdragon 8cx Gen 3 Compute PlatformAffected
Snapdragon AR1 Gen 1 PlatformAffected
WCD9370Affected
WCD9375Affected
WCD9378CAffected
WCD9380Affected
WCD9385Affected
WCN3950Affected
WCN3988Affected
WSA8830Affected
WSA8832Affected
WSA8835Affected
WSA8840Affected
and 10 more versions

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.