CVE Field Guide
About Us
CVE-2026-21366
PUBLISHED
Integer Overflow or Wraparound in Data Network Stack & Connectivity
Assigner:
qualcomm
Reserved:
17.12.2025
Published:
04.08.2026
Updated:
04.08.2026
Memory corruption while processing a packet with a size close to the maximum allowed value.
Metrics
CVSS 3.1
CVSS Vector:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Score:
7.8
CVSS score
7.8
Attack Vector
Local
Scope
Unchanged
Attack Complexity
Low
Confidentiality Impact
High
Privileges Required
Low
Integrity Impact
High
User Interaction
None
Availability Impact
High
CVSS 3.1
Product Status
Vendor
Qualcomm, Inc.
Product
Snapdragon
Versions
Default:
unaffected
Version LeMans_AU_LGIT is affected
Version LeMansAU is affected
Version QAM8255P is affected
Version QAM8295P is affected
Version QAM8620P is affected
Version QAMSRV1H is affected
Version QAMSRV1M is affected
Version QCA6574AU is affected
Version QCA6595 is affected
Version QCA6595AU is affected
Version QCA6688AQ is affected
Version QCA6696 is affected
Version QCA6698AQ is affected
Version QCA6797AQ is affected
Version QCA8695AU is affected
Version SA6145P is affected
Version SA6150P is affected
Version SA6155P is affected
Version SA7255P is affected
Version SA7775P is affected
Version SA8145P is affected
Version SA8150P is affected
Version SA8155P is affected
Version SA8195P is affected
Version SA8255P is affected
Version SA8295P is affected
Version SA8540P is affected
Version SA8620P is affected
Version SA8770P is affected
Version SA9000P is affected
Version SRV1H is affected
Version SRV1L is affected
Version SRV1M is affected
References
https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-bulletin.html
Problem Types
CWE-190 Integer Overflow or Wraparound
CWE