Dashboard / CVE-2026-21384

CVE-2026-21384

MEDIUM
MEDIUM Priority: 0.00 BB Relevance: 36/100
Published: 2026-07-06 Modified: 2026-10-25 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: Low
I: Low
A: Low

Description

Memory Corruption when updating prepared commands with invalid port indices based on user space input exceeds supported read client limits.

Weakness Classification (1)

Affected Software (79)

VendorProductVersion
qualcomm fastconnect_6700_firmware -
qualcomm fastconnect_6900_firmware -
qualcomm fastconnect_7800_firmware -
qualcomm lemans_au_lgit_firmware -
qualcomm lemansau_firmware -
qualcomm netrani_firmware -
qualcomm pandeiro_firmware -
qualcomm qam8255p_firmware -
qualcomm qamsrv1h_firmware -
qualcomm qamsrv1m_firmware -
qualcomm qca6595_firmware -
qualcomm qca6595au_firmware -
qualcomm qca6678aq_firmware -
qualcomm qca6698aq_firmware -
qualcomm qca6698au_firmware -
qualcomm qca6797aq_firmware -
qualcomm qcm4490_firmware -
qualcomm qcm5430_firmware -
qualcomm qcm6490_firmware -
qualcomm qcm8838_firmware -
qualcomm qcs4490_firmware -
qualcomm qcs8550_firmware -
qualcomm qln1083bd_firmware -
qualcomm qln1086bd_firmware -
qualcomm qpa1083bd_firmware -
qualcomm qpa1086bd_firmware -
qualcomm qxm1093_firmware -
qualcomm qxm1094_firmware -
qualcomm qxm1095_firmware -
qualcomm qxm1096_firmware -
Showing 30 of 79 entries

References & Advisories (1)

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.3 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

EPSS — Exploitation Probability

0.08%
Raw Score 0.000790
Percentile 0.1%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00079
2026-10-28
0.00079

Intelligence Sources

nvd ref →

External Links