CVE-2026-21366CWE-190

CVE-2026-21366

High · published August 4, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
0.9
In the wild
Unconfirmed
What it is

Memory corruption while processing a packet with a size close to the maximum allowed value.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00103 · 0.9th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2026-08-04T20:16Z
Affected products (33)
ProductVersionsFixed in
qualcomm/qamsrv1h_firmwareall versions—
qualcomm/qamsrv1m_firmwareall versions—
qualcomm/qca6574au_firmwareall versions—
qualcomm/qca6595_firmwareall versions—
qualcomm/lemans_au_lgit_firmwareall versions—
qualcomm/lemansau_firmwareall versions—
qualcomm/qam8255p_firmwareall versions—
qualcomm/qam8295p_firmwareall versions—
qualcomm/qam8620p_firmwareall versions—
qualcomm/sa9000p_firmwareall versions—
qualcomm/srv1h_firmwareall versions—
qualcomm/srv1l_firmwareall versions—
qualcomm/srv1m_firmwareall versions—
qualcomm/qca6595au_firmwareall versions—
qualcomm/qca6688aq_firmwareall versions—
qualcomm/qca6696_firmwareall versions—
qualcomm/qca6698aq_firmwareall versions—
qualcomm/qca6797aq_firmwareall versions—
qualcomm/qca8695au_firmwareall versions—
qualcomm/sa6145p_firmwareall versions—
qualcomm/sa6150p_firmwareall versions—
qualcomm/sa6155p_firmwareall versions—
qualcomm/sa7255p_firmwareall versions—
qualcomm/sa7775p_firmwareall versions—
qualcomm/sa8145p_firmwareall versions—
qualcomm/sa8150p_firmwareall versions—
qualcomm/sa8155p_firmwareall versions—
qualcomm/sa8195p_firmwareall versions—
qualcomm/sa8255p_firmwareall versions—
qualcomm/sa8295p_firmwareall versions—
qualcomm/sa8540p_firmwareall versions—
qualcomm/sa8620p_firmwareall versions—
qualcomm/sa8770p_firmwareall versions—
References (1)
EPSS history
Timeline
  • 04 AUG 15:07Z
    Integer Overflow or Wraparound in Data Network Stack & Connectivity
    cvelistv5