Back to the CVE list
CVE-2026-21368

Out-of-bounds write in Qualcomm Fastconnect 6700 Firmware

CVSS score

5.3

EPSS probability

%0.1

Risk score

0.0

Published

3 mo ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline
Official patch verified

Etkilenen ürün ve sürüm için yayımlanan güvenlik güncellemesini uygulayın.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2026-21368 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

Memory Corruption when parsing jpeg commands due to unaccounted extra writes to the buffer during validation checks.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2026-21368 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1qualcommfastconnect 6700 firmware View
2qualcommfastconnect 6700 View
3qualcommfastconnect 6900 firmware View
4qualcommfastconnect 6900 View
5qualcommfastconnect 7800 firmware View
6qualcommfastconnect 7800 View
7qualcommg3x gen 2 firmware View
8qualcommg3x gen 2 View
9qualcommiq-9075 firmware View
10qualcommiq-9075 View
11qualcommsm8550p firmware View
12qualcommsm8550p View
13qualcommsnapdragon 4 gen 2 mobile platform firmware View
14qualcommsnapdragon 4 gen 2 mobile platform View
15qualcommsnapdragon 460 mobile platform firmware View
16qualcommsnapdragon 460 mobile platform View
17qualcommsnapdragon 6 gen 1 mobile platform firmware View
18qualcommsnapdragon 6 gen 1 mobile platform View
19qualcommsnapdragon 6 gen 3 mobile platform firmware View
20qualcommsnapdragon 6 gen 3 mobile platform View
21qualcommsnapdragon 662 mobile platform firmware View
22qualcommsnapdragon 662 mobile platform View
23qualcommsnapdragon 7 gen 1 mobile platform firmware View
24qualcommsnapdragon 7 gen 1 mobile platform View
25qualcommsnapdragon 8 elite firmware View
26qualcommsnapdragon 8 elite View
27qualcommsnapdragon 8 gen 1 mobile platform firmware View
28qualcommsnapdragon 8 gen 1 mobile platform View
29qualcommsnapdragon 8 gen 2 mobile platform firmware View
30qualcommsnapdragon 8 gen 2 mobile platform View
31qualcommsnapdragon ar1 gen 1 platform firmware View
32qualcommsnapdragon ar1 gen 1 platform View
33qualcommsnapdragon xr2 5g platform firmware View
34qualcommsnapdragon xr2 5g platform View
35qualcommsnapdragon xr2+ gen 1 platform firmware View
36qualcommsnapdragon xr2+ gen 1 platform View
37qualcommsrv1h firmware View
38qualcommsrv1h View
39qualcommsrv1m firmware View
40qualcommsrv1m View
41qualcommsxr2230p firmware View
42qualcommsxr2230p View
43qualcommsxr2330p firmware View
44qualcommsxr2330p View
45qualcommsxr2350p firmware View
46qualcommsxr2350p View
47qualcommwcd9370 firmware View
48qualcommwcd9370 View
49qualcommwcd9371 firmware View
50qualcommwcd9371 View
51qualcommwcd9375 firmware View
52qualcommwcd9375 View
53qualcommwcd9378 firmware View
54qualcommwcd9378 View
55qualcommwcd9380 firmware View
56qualcommwcd9380 View
57qualcommwcd9385 firmware View
58qualcommwcd9385 View
59qualcommwcd9390 firmware View
60qualcommwcd9390 View
61qualcommwcd9395 firmware View
62qualcommwcd9395 View
63qualcommwcn3950 firmware View
64qualcommwcn3950 View
65qualcommwcn3988 firmware View
66qualcommwcn3988 View
67qualcommwcn6450 firmware View
68qualcommwcn6450 View
69qualcommwcn6650 firmware View
70qualcommwcn6650 View
71qualcommwcn6755 firmware View
72qualcommwcn6755 View
73qualcommwcn7860 firmware View
74qualcommwcn7860 View
75qualcommwcn7861 firmware View
76qualcommwcn7861 View
77qualcommwcn7881 firmware View
78qualcommwcn7881 View
79qualcommwsa8810 firmware View
80qualcommwsa8810 View
81qualcommwsa8815 firmware View
82qualcommwsa8815 View
83qualcommwsa8830 firmware View
84qualcommwsa8830 View
85qualcommwsa8832 firmware View
86qualcommwsa8832 View
87qualcommwsa8835 firmware View
88qualcommwsa8835 View
89qualcommlemans au lgit firmware View
90qualcommlemans au lgit View
91qualcommlemansau firmware View
92qualcommlemansau View
93qualcommnetrani firmware View
94qualcommnetrani View
95qualcommpandeiro firmware View
96qualcommpandeiro View
97qualcommqam8255p firmware View
98qualcommqam8255p View
99qualcommqamsrv1h firmware View
100qualcommqamsrv1h View
101qualcommqamsrv1m firmware View
102qualcommqamsrv1m View
103qualcommqca6595 firmware View
104qualcommqca6595 View
105qualcommqca6595au firmware View
106qualcommqca6595au View
107qualcommqca6678aq firmware View
108qualcommqca6678aq View
109qualcommqca6698aq firmware View
110qualcommqca6698aq View
111qualcommqca6698au firmware View
112qualcommqca6698au View
113qualcommqca6797aq firmware View
114qualcommqca6797aq View
115qualcommqcm4490 firmware View
116qualcommqcm4490 View
117qualcommqcm8838 firmware View
118qualcommqcm8838 View
119qualcommqcs4490 firmware View
120qualcommqcs4490 View
121qualcommqcs8550 firmware View
122qualcommqcs8550 View
123qualcommqln1083bd firmware View
124qualcommqln1083bd View
125qualcommqln1086bd firmware View
126qualcommqln1086bd View
127qualcommqpa1083bd firmware View
128qualcommqpa1083bd View
129qualcommqpa1086bd firmware View
130qualcommqpa1086bd View
131qualcommqxm1093 firmware View
132qualcommqxm1093 View
133qualcommqxm1094 firmware View
134qualcommqxm1094 View
135qualcommqxm1095 firmware View
136qualcommqxm1095 View
137qualcommqxm1096 firmware View
138qualcommqxm1096 View
139qualcommsa7255p firmware View
140qualcommsa7255p View
141qualcommsa7775p firmware View
142qualcommsa7775p View
143qualcommsa8255p firmware View
144qualcommsa8255p View
145qualcommsa8620p firmware View
146qualcommsa8620p View
147qualcommsa8770p firmware View
148qualcommsa8770p View
149qualcommsa9000p firmware View
150qualcommsa9000p View
151qualcommsar2130p firmware View
152qualcommsar2130p View
153qualcommsc8380xp firmware View
154qualcommsc8380xp View
155qualcommsd 8 gen1 5g firmware View
156qualcommsd 8 gen1 5g View
157qualcommsd865 5g firmware View
158qualcommsd865 5g View
159qualcommsdr753 firmware View
160qualcommsdr753 View
161qualcommsm7435 firmware View
162qualcommsm7435 View
163qualcommsm7525 firmware View
164qualcommsm7525 View
165qualcommsm7550 firmware View
166qualcommsm7550 View
167qualcommsm7550p firmware View
168qualcommsm7550p View
169qualcommwsa8840 firmware View
170qualcommwsa8840 View
171qualcommwsa8845 firmware View
172qualcommwsa8845 View
173qualcommwsa8845h firmware View
174qualcommwsa8845h View
175qualcommx1e80100 firmware View
176qualcommx1e80100 View
177qualcommxrv7209 firmware View
178qualcommxrv7209 View
179qualcommxrv9209 firmware View
180qualcommxrv9209 View
Total affected vendors: 1|Products: 180

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
5.3CVSS V31MEDIUMCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:LNVD
5.3CVSS V31MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LNVD

Patch and Remediation Guide

Solution & Remediation Advisory

Patch verified

2 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.

nvd

NVD tarafından Patch olarak etiketlenmiş referans

Open source
reference

Yama veya çözüm referansı

Open source
Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Apply the official update named in the evidence only to the matching product and version.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2026-21368 is associated with the following CWEs:

CWE-787: Out-of-bounds Write

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2026-21368 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureYerel erişim
PermissionsLow
UserGerekmiyor

Official Sources and Advisories

https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2026-bulletin.htmlpatch

CVSS Vector Radar Chart

5.3 / 10
Attack VectorLocalComplexityLowPrivilegesLowUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityLow

Vulnerability Scoring Details

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Attack VectorLocal
Attack ComplexityLow
Privileges RequiredLow privileges
User InteractionNone required
Confidentiality (Gizlilik)Low
Integrity (Bütünlük)None
Availability (Erişilebilirlik)Low

Yama doğrulandı

2 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.

Follow the vendor

Q
qualcomm logo
qualcomm

Weakness Type (CWE & CAPEC)

CWE-787

Similar Vulnerabilities

6.5
CVE-2020-3702Vulnerability in Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure And Networking
QI
Qualcomm, Inc. logo
VendorQualcomm, Inc.ProductSnapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking+27 etkilenen
Patch status unknownEPSS %06 y ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-21368"