CVE-2026-21368 PUBLISHED

Out-of-bounds Write in Camera Driver

Assigner: qualcomm
Reserved: 17.12.2025 Published: 06.07.2026 Updated: 07.07.2026

Memory Corruption when parsing jpeg commands due to unaccounted extra writes to the buffer during validation checks.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
CVSS Score: 5.3

Attack Vector	Local	Scope	Changed
Attack Complexity	High	Confidentiality Impact	Low
Privileges Required	Low	Integrity Impact	Low
User Interaction	None	Availability Impact	Low

CVSS 3.1

Product Status

Vendor	Qualcomm, Inc.
Product	Snapdragon
Versions	Default: unaffected Version FastConnect 6700 is affected Version FastConnect 6900 is affected Version FastConnect 7800 is affected Version G3x Gen 2 is affected Version IQ9 Series Platform is affected Version LeMans_AU_LGIT is affected Version LeMansAU is affected Version Netrani is affected Version Pandeiro is affected Version QAM8255P is affected Version QAMSRV1H is affected Version QAMSRV1M is affected Version QCA6595 is affected Version QCA6595AU is affected Version QCA6678AQ is affected Version QCA6698AQ is affected Version QCA6698AU is affected Version QCA6797AQ is affected Version QCM4490 is affected Version QCM8838 is affected Version QCS4490 is affected Version QCS8550 is affected Version QLN1083BD is affected Version QLN1086BD is affected Version QPA1083BD is affected Version QPA1086BD is affected Version QXM1093 is affected Version QXM1094 is affected Version QXM1095 is affected Version QXM1096 is affected Version SA7255P is affected Version SA7775P is affected Version SA8255P is affected Version SA8620P is affected Version SA8770P is affected Version SA9000P is affected Version SAR2130P is affected Version SC8380XP is affected Version SD 8 Gen1 5G is affected Version SD865 5G is affected Version SDR753 is affected Version SM7435 is affected Version SM7525 is affected Version SM7550 is affected Version SM7550P is affected Version SM8550P is affected Version Snapdragon 4 Gen 2 Mobile Platform is affected Version Snapdragon 460 Mobile Platform is affected Version Snapdragon 6 Gen 1 Mobile Platform is affected Version Snapdragon 6 Gen 3 Mobile Platform is affected Version Snapdragon 662 Mobile Platform is affected Version Snapdragon 7 Gen 1 Mobile Platform is affected Version Snapdragon 8 Elite is affected Version Snapdragon 8 Gen 1 Mobile Platform is affected Version Snapdragon 8 Gen 2 Mobile Platform is affected Version Snapdragon 8+ Gen 2 Mobile Platform is affected Version Snapdragon AR1 Gen 1 Platform is affected Version Snapdragon XR2 5G Platform is affected Version Snapdragon XR2+ Gen 1 Platform is affected Version SRV1H is affected Version SRV1M is affected Version SXR2230P is affected Version SXR2330P is affected Version SXR2350P is affected Version WCD9370 is affected Version WCD9371 is affected Version WCD9375 is affected Version WCD9378 is affected Version WCD9380 is affected Version WCD9385 is affected Version WCD9390 is affected Version WCD9395 is affected Version WCN3950 is affected Version WCN3988 is affected Version WCN6450 is affected Version WCN6650 is affected Version WCN6755 is affected Version WCN7860 is affected Version WCN7861 is affected Version WCN7881 is affected Version WSA8810 is affected Version WSA8815 is affected Version WSA8830 is affected Version WSA8832 is affected Version WSA8835 is affected Version WSA8840 is affected Version WSA8845 is affected Version WSA8845H is affected Version X1E80100 is affected Version XRV7209 is affected Version XRV9209 is affected

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2026-bulletin.html

Problem Types

CWE-787: Out-of-bounds Write CWE