ГлавнаяУязвимости → CVE-2026-21378
7.8высокая

CVE-2026-21378

Описание

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.

Затрагиваемое ПО
Qualcomm Wcd9375 firmwareQualcomm Wcd9375Qualcomm Wcd9378c firmwareQualcomm Wcd9378cQualcomm Wcd9380 firmwareQualcomm Wcd9380Qualcomm Wcd9385 firmwareQualcomm Wcd9385Qualcomm Wcn3950 firmwareQualcomm Wcn3950Qualcomm Wcn3988 firmwareQualcomm Wcn3988Qualcomm Wsa8810 firmwareQualcomm Wsa8810Qualcomm Wsa8815 firmwareQualcomm Wsa8815Qualcomm Wsa8830 firmwareQualcomm Wsa8830Qualcomm Wsa8832 firmwareQualcomm Wsa8832Qualcomm Wsa8835 firmwareQualcomm Wsa8835Qualcomm Wsa8840 firmwareQualcomm Wsa8840Qualcomm Wsa8845 firmware
CVSS
Балл7.8 — высокая
ВекторCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Источники
https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html