CVE-2026-21367 - Vulnerability Details - OpenCVE

Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans.

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required High

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

No data.

References

Link	Providers
https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html

History

Mon, 06 Apr 2026 18:00:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Mon, 06 Apr 2026 16:45:00 +0000

Type	Values Removed	Values Added
Description		Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans.
Title		Buffer Over-read in WLAN Firmware
Weaknesses		CWE-126
References		https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html
Metrics		cvssV3_1 `{'score': 7.6, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: qualcomm

Published: 2026-04-06T15:33:46.114Z

Updated: 2026-04-06T16:22:15.658Z

Reserved: 2025-12-17T04:35:45.741Z

Link: CVE-2026-21367

Vulnrichment

Updated: 2026-04-06T16:21:30.782Z

NVD

Status : Received

Published: 2026-04-06T16:16:29.203

Modified: 2026-04-06T16:16:29.203

Link: CVE-2026-21367

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-21367", "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "state": "PUBLISHED", "assignerShortName": "qualcomm", "dateReserved": "2025-12-17T04:35:45.741Z", "datePublished": "2026-04-06T15:33:46.114Z", "dateUpdated": "2026-04-06T16:22:15.658Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "platforms": ["Snapdragon Auto", "Snapdragon CCW", "Snapdragon Compute", "Snapdragon Consumer Electronics Connectivity", "Snapdragon Consumer IOT", "Snapdragon Industrial IOT", "Snapdragon MC", "Snapdragon Mobile", "Snapdragon WBC", "Snapdragon Wired Infrastructure and Networking"], "product": "Snapdragon", "vendor": "Qualcomm, Inc.", "versions": [{"status": "affected", "version": "AR8035"}, {"status": "affected", "version": "Cologne"}, {"status": "affected", "version": "CSR8811"}, {"status": "affected", "version": "FastConnect 6200"}, {"status": "affected", "version": "FastConnect 6700"}, {"status": "affected", "version": "FastConnect 6900"}, {"status": "affected", "version": "FastConnect 7800"}, {"status": "affected", "version": "FWA Gen 3 Ultra Platform"}, {"status": "affected", "version": "G2 Gen 1"}, {"status": "affected", "version": "Immersive Home 214 Platform"}, {"status": "affected", "version": "Immersive Home 216 Platform"}, {"status": "affected", "version": "Immersive Home 316 Platform"}, {"status": "affected", "version": "Immersive Home 318 Platform"}, {"status": "affected", "version": "IPQ5010"}, {"status": "affected", "version": "IPQ5028"}, {"status": "affected", "version": "IPQ6000"}, {"status": "affected", "version": "IPQ6010"}, {"status": "affected", "version": "IPQ6018"}, {"status": "affected", "version": "IPQ8076"}, {"status": "affected", "version": "IPQ8078"}, {"status": "affected", "version": "IPQ9574"}, {"status": "affected", "version": "Milos"}, {"status": "affected", "version": "Netrani"}, {"status": "affected", "version": "Networking Pro 1200 Platform"}, {"status": "affected", "version": "Networking Pro 1210 Platform"}, {"status": "affected", "version": "Networking Pro 1610 Platform"}, {"status": "affected", "version": "Networking Pro 400 Platform"}, {"status": "affected", "version": "Networking Pro 600 Platform"}, {"status": "affected", "version": "Networking Pro 610 Platform"}, {"status": "affected", "version": "Networking Pro 800 Platform"}, {"status": "affected", "version": "Networking Pro 810 Platform"}, {"status": "affected", "version": "Orne"}, {"status": "affected", "version": "Palawan25"}, {"status": "affected", "version": "Pandeiro"}, {"status": "affected", "version": "QCA4024"}, {"status": "affected", "version": "QCA6391"}, {"status": "affected", "version": "QCA6698AU"}, {"status": "affected", "version": "QCA6777AQ"}, {"status": "affected", "version": "QCA6787AQ"}, {"status": "affected", "version": "QCA6797AQ"}, {"status": "affected", "version": "QCA8075"}, {"status": "affected", "version": "QCA8081"}, {"status": "affected", "version": "QCA8082"}, {"status": "affected", "version": "QCA8084"}, {"status": "affected", "version": "QCA8085"}, {"status": "affected", "version": "QCA8337"}, {"status": "affected", "version": "QCA8386"}, {"status": "affected", "version": "QCA9888"}, {"status": "affected", "version": "QCA9889"}, {"status": "affected", "version": "QCC2073"}, {"status": "affected", "version": "QCC2076"}, {"status": "affected", "version": "QCC710"}, {"status": "affected", "version": "QCM4490"}, {"status": "affected", "version": "QCN5022"}, {"status": "affected", "version": "QCN5024"}, {"status": "affected", "version": "QCN5052"}, {"status": "affected", "version": "QCN5122"}, {"status": "affected", "version": "QCN5124"}, {"status": "affected", "version": "QCN5152"}, {"status": "affected", "version": "QCN5154"}, {"status": "affected", "version": "QCN5164"}, {"status": "affected", "version": "QCN6023"}, {"status": "affected", "version": "QCN6024"}, {"status": "affected", "version": "QCN6122"}, {"status": "affected", "version": "QCN6132"}, {"status": "affected", "version": "QCN6224"}, {"status": "affected", "version": "QCN6274"}, {"status": "affected", "version": "QCN9000"}, {"status": "affected", "version": "QCN9011"}, {"status": "affected", "version": "QCN9012"}, {"status": "affected", "version": "QCN9022"}, {"status": "affected", "version": "QCN9024"}, {"status": "affected", "version": "QCN9070"}, {"status": "affected", "version": "QCN9100"}, {"status": "affected", "version": "QCN9274"}, {"status": "affected", "version": "QCS4490"}, {"status": "affected", "version": "QCS8550"}, {"status": "affected", "version": "QFW7114"}, {"status": "affected", "version": "QFW7124"}, {"status": "affected", "version": "QLN1083BD"}, {"status": "affected", "version": "QLN1086BD"}, {"status": "affected", "version": "QMP1000"}, {"status": "affected", "version": "QPA1083BD"}, {"status": "affected", "version": "QPA1086BD"}, {"status": "affected", "version": "QXM1093"}, {"status": "affected", "version": "QXM1094"}, {"status": "affected", "version": "QXM1095"}, {"status": "affected", "version": "QXM1096"}, {"status": "affected", "version": "SAR2130P"}, {"status": "affected", "version": "SC8380XP"}, {"status": "affected", "version": "SD 8 Gen1 5G"}, {"status": "affected", "version": "SM6650P"}, {"status": "affected", "version": "SM7435"}, {"status": "affected", "version": "SM7635P"}, {"status": "affected", "version": "SM7675"}, {"status": "affected", "version": "SM7675P"}, {"status": "affected", "version": "SM8475P"}, {"status": "affected", "version": "SM8635"}, {"status": "affected", "version": "SM8635P"}, {"status": "affected", "version": "SM8650Q"}, {"status": "affected", "version": "SM8750P"}, {"status": "affected", "version": "Snapdragon 6 Gen 1 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 6 Gen 3 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 6 Gen 4 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 7 Gen 1 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 7+ Gen 2 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 7s Gen 3 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 8 Elite"}, {"status": "affected", "version": "Snapdragon 8 Elite Gen 5"}, {"status": "affected", "version": "Snapdragon 8 Gen 1 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 8 Gen 3 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 8+ Gen 1 Mobile Platform"}, {"status": "affected", "version": "Snapdragon X72 5G Modem-RF System"}, {"status": "affected", "version": "Snapdragon X75 5G Modem-RF System"}, {"status": "affected", "version": "WCD9340"}, {"status": "affected", "version": "WCD9370"}, {"status": "affected", "version": "WCD9375"}, {"status": "affected", "version": "WCD9378"}, {"status": "affected", "version": "WCD9378C"}, {"status": "affected", "version": "WCD9380"}, {"status": "affected", "version": "WCD9385"}, {"status": "affected", "version": "WCD9390"}, {"status": "affected", "version": "WCD9395"}, {"status": "affected", "version": "WCN3950"}, {"status": "affected", "version": "WCN3988"}, {"status": "affected", "version": "WCN6450"}, {"status": "affected", "version": "WCN6650"}, {"status": "affected", "version": "WCN6755"}, {"status": "affected", "version": "WCN7860"}, {"status": "affected", "version": "WCN7861"}, {"status": "affected", "version": "WCN7880"}, {"status": "affected", "version": "WCN7881"}, {"status": "affected", "version": "WSA8810"}, {"status": "affected", "version": "WSA8815"}, {"status": "affected", "version": "WSA8830"}, {"status": "affected", "version": "WSA8832"}, {"status": "affected", "version": "WSA8835"}, {"status": "affected", "version": "WSA8840"}, {"status": "affected", "version": "WSA8845"}, {"status": "affected", "version": "WSA8845H"}, {"status": "affected", "version": "X2000077"}, {"status": "affected", "version": "X2000086"}, {"status": "affected", "version": "X2000090"}, {"status": "affected", "version": "X2000092"}, {"status": "affected", "version": "X2000094"}, {"status": "affected", "version": "XG101002"}, {"status": "affected", "version": "XG101032"}, {"status": "affected", "version": "XG101039"}, {"status": "affected", "version": "XRV7209"}, {"status": "affected", "version": "XRV9209"}]}], "descriptions": [{"lang": "en", "value": "Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans."}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.6, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-126", "description": "CWE-126 Buffer Over-read", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "shortName": "qualcomm", "dateUpdated": "2026-04-06T15:33:46.114Z"}, "references": [{"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html"}], "title": "Buffer Over-read in WLAN Firmware"}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-21367", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-06T16:11:56.406673Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-06T16:22:15.658Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-21367", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-06T16:11:56.406673Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-06T16:21:30.782Z"}}], "cna": {"title": "Buffer Over-read in WLAN Firmware", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.6, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Qualcomm, Inc.", "product": "Snapdragon", "versions": [{"status": "affected", "version": "AR8035"}, {"status": "affected", "version": "Cologne"}, {"status": "affected", "version": "CSR8811"}, {"status": "affected", "version": "FastConnect 6200"}, {"status": "affected", "version": "FastConnect 6700"}, {"status": "affected", "version": "FastConnect 6900"}, {"status": "affected", "version": "FastConnect 7800"}, {"status": "affected", "version": "FWA Gen 3 Ultra Platform"}, {"status": "affected", "version": "G2 Gen 1"}, {"status": "affected", "version": "Immersive Home 214 Platform"}, {"status": "affected", "version": "Immersive Home 216 Platform"}, {"status": "affected", "version": "Immersive Home 316 Platform"}, {"status": "affected", "version": "Immersive Home 318 Platform"}, {"status": "affected", "version": "IPQ5010"}, {"status": "affected", "version": "IPQ5028"}, {"status": "affected", "version": "IPQ6000"}, {"status": "affected", "version": "IPQ6010"}, {"status": "affected", "version": "IPQ6018"}, {"status": "affected", "version": "IPQ8076"}, {"status": "affected", "version": "IPQ8078"}, {"status": "affected", "version": "IPQ9574"}, {"status": "affected", "version": "Milos"}, {"status": "affected", "version": "Netrani"}, {"status": "affected", "version": "Networking Pro 1200 Platform"}, {"status": "affected", "version": "Networking Pro 1210 Platform"}, {"status": "affected", "version": "Networking Pro 1610 Platform"}, {"status": "affected", "version": "Networking Pro 400 Platform"}, {"status": "affected", "version": "Networking Pro 600 Platform"}, {"status": "affected", "version": "Networking Pro 610 Platform"}, {"status": "affected", "version": "Networking Pro 800 Platform"}, {"status": "affected", "version": "Networking Pro 810 Platform"}, {"status": "affected", "version": "Orne"}, {"status": "affected", "version": "Palawan25"}, {"status": "affected", "version": "Pandeiro"}, {"status": "affected", "version": "QCA4024"}, {"status": "affected", "version": "QCA6391"}, {"status": "affected", "version": "QCA6698AU"}, {"status": "affected", "version": "QCA6777AQ"}, {"status": "affected", "version": "QCA6787AQ"}, {"status": "affected", "version": "QCA6797AQ"}, {"status": "affected", "version": "QCA8075"}, {"status": "affected", "version": "QCA8081"}, {"status": "affected", "version": "QCA8082"}, {"status": "affected", "version": "QCA8084"}, {"status": "affected", "version": "QCA8085"}, {"status": "affected", "version": "QCA8337"}, {"status": "affected", "version": "QCA8386"}, {"status": "affected", "version": "QCA9888"}, {"status": "affected", "version": "QCA9889"}, {"status": "affected", "version": "QCC2073"}, {"status": "affected", "version": "QCC2076"}, {"status": "affected", "version": "QCC710"}, {"status": "affected", "version": "QCM4490"}, {"status": "affected", "version": "QCN5022"}, {"status": "affected", "version": "QCN5024"}, {"status": "affected", "version": "QCN5052"}, {"status": "affected", "version": "QCN5122"}, {"status": "affected", "version": "QCN5124"}, {"status": "affected", "version": "QCN5152"}, {"status": "affected", "version": "QCN5154"}, {"status": "affected", "version": "QCN5164"}, {"status": "affected", "version": "QCN6023"}, {"status": "affected", "version": "QCN6024"}, {"status": "affected", "version": "QCN6122"}, {"status": "affected", "version": "QCN6132"}, {"status": "affected", "version": "QCN6224"}, {"status": "affected", "version": "QCN6274"}, {"status": "affected", "version": "QCN9000"}, {"status": "affected", "version": "QCN9011"}, {"status": "affected", "version": "QCN9012"}, {"status": "affected", "version": "QCN9022"}, {"status": "affected", "version": "QCN9024"}, {"status": "affected", "version": "QCN9070"}, {"status": "affected", "version": "QCN9100"}, {"status": "affected", "version": "QCN9274"}, {"status": "affected", "version": "QCS4490"}, {"status": "affected", "version": "QCS8550"}, {"status": "affected", "version": "QFW7114"}, {"status": "affected", "version": "QFW7124"}, {"status": "affected", "version": "QLN1083BD"}, {"status": "affected", "version": "QLN1086BD"}, {"status": "affected", "version": "QMP1000"}, {"status": "affected", "version": "QPA1083BD"}, {"status": "affected", "version": "QPA1086BD"}, {"status": "affected", "version": "QXM1093"}, {"status": "affected", "version": "QXM1094"}, {"status": "affected", "version": "QXM1095"}, {"status": "affected", "version": "QXM1096"}, {"status": "affected", "version": "SAR2130P"}, {"status": "affected", "version": "SC8380XP"}, {"status": "affected", "version": "SD 8 Gen1 5G"}, {"status": "affected", "version": "SM6650P"}, {"status": "affected", "version": "SM7435"}, {"status": "affected", "version": "SM7635P"}, {"status": "affected", "version": "SM7675"}, {"status": "affected", "version": "SM7675P"}, {"status": "affected", "version": "SM8475P"}, {"status": "affected", "version": "SM8635"}, {"status": "affected", "version": "SM8635P"}, {"status": "affected", "version": "SM8650Q"}, {"status": "affected", "version": "SM8750P"}, {"status": "affected", "version": "Snapdragon 6 Gen 1 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 6 Gen 3 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 6 Gen 4 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 7 Gen 1 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 7+ Gen 2 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 7s Gen 3 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 8 Elite"}, {"status": "affected", "version": "Snapdragon 8 Elite Gen 5"}, {"status": "affected", "version": "Snapdragon 8 Gen 1 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 8 Gen 3 Mobile Platform"}, {"status": "affected", "version": "Snapdragon 8+ Gen 1 Mobile Platform"}, {"status": "affected", "version": "Snapdragon X72 5G Modem-RF System"}, {"status": "affected", "version": "Snapdragon X75 5G Modem-RF System"}, {"status": "affected", "version": "WCD9340"}, {"status": "affected", "version": "WCD9370"}, {"status": "affected", "version": "WCD9375"}, {"status": "affected", "version": "WCD9378"}, {"status": "affected", "version": "WCD9378C"}, {"status": "affected", "version": "WCD9380"}, {"status": "affected", "version": "WCD9385"}, {"status": "affected", "version": "WCD9390"}, {"status": "affected", "version": "WCD9395"}, {"status": "affected", "version": "WCN3950"}, {"status": "affected", "version": "WCN3988"}, {"status": "affected", "version": "WCN6450"}, {"status": "affected", "version": "WCN6650"}, {"status": "affected", "version": "WCN6755"}, {"status": "affected", "version": "WCN7860"}, {"status": "affected", "version": "WCN7861"}, {"status": "affected", "version": "WCN7880"}, {"status": "affected", "version": "WCN7881"}, {"status": "affected", "version": "WSA8810"}, {"status": "affected", "version": "WSA8815"}, {"status": "affected", "version": "WSA8830"}, {"status": "affected", "version": "WSA8832"}, {"status": "affected", "version": "WSA8835"}, {"status": "affected", "version": "WSA8840"}, {"status": "affected", "version": "WSA8845"}, {"status": "affected", "version": "WSA8845H"}, {"status": "affected", "version": "X2000077"}, {"status": "affected", "version": "X2000086"}, {"status": "affected", "version": "X2000090"}, {"status": "affected", "version": "X2000092"}, {"status": "affected", "version": "X2000094"}, {"status": "affected", "version": "XG101002"}, {"status": "affected", "version": "XG101032"}, {"status": "affected", "version": "XG101039"}, {"status": "affected", "version": "XRV7209"}, {"status": "affected", "version": "XRV9209"}], "platforms": ["Snapdragon Auto", "Snapdragon CCW", "Snapdragon Compute", "Snapdragon Consumer Electronics Connectivity", "Snapdragon Consumer IOT", "Snapdragon Industrial IOT", "Snapdragon MC", "Snapdragon Mobile", "Snapdragon WBC", "Snapdragon Wired Infrastructure and Networking"], "defaultStatus": "unaffected"}], "references": [{"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html"}], "descriptions": [{"lang": "en", "value": "Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-126", "description": "CWE-126 Buffer Over-read"}]}], "providerMetadata": {"orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "shortName": "qualcomm", "dateUpdated": "2026-04-06T15:33:46.114Z"}}}, "cveMetadata": {"cveId": "CVE-2026-21367", "state": "PUBLISHED", "dateUpdated": "2026-04-06T16:22:15.658Z", "dateReserved": "2025-12-17T04:35:45.741Z", "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "datePublished": "2026-04-06T15:33:46.114Z", "assignerShortName": "qualcomm"}, "dataVersion": "5.2"}