CVE catalog

CVE-2026-21380

Memory Corruption when using deprecated DMABUF IOCTL…

Memory Corruption when using deprecated DMABUF IOCTL calls to manage video memory.

Severity: High · CVSS 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published: Apr 6, 2026, 4:16:30 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.07% · Oct 27, 2026

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / release	Package	Version	Status	Source
UnknownRelease not reported	cologne_firmware	Not reported	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	fastconnect_6900_firmware	Not reported	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	fastconnect_7800_firmware	Not reported	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	qca0000_firmware	Not reported	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	sc8380xp_firmware	Not reported	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	snapdragon_ar1_gen_1_platform_firmware	Not reported	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	wcd9378c_firmware	Not reported	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	wcd9380_firmware	Not reported	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	wcd9385_firmware	Not reported	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	wsa8830_firmware	Not reported	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	wsa8832_firmware	Not reported	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	wsa8835_firmware	Not reported	UnknownSource applicability is not established	Provider not reported

Showing 12 observations. All 20 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence

Distribution / release	Package	Version	Status	Source
UnknownRelease not reported	cologne_firmware	Not reported	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	fastconnect_6900_firmware	Not reported	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	fastconnect_7800_firmware	Not reported	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	qca0000_firmware	Not reported	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	sc8380xp_firmware	Not reported	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	snapdragon_ar1_gen_1_platform_firmware	Not reported	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	wcd9378c_firmware	Not reported	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	wcd9380_firmware	Not reported	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	wcd9385_firmware	Not reported	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	wsa8830_firmware	Not reported	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	wsa8832_firmware	Not reported	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	wsa8835_firmware	Not reported	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	wsa8840_firmware	Not reported	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	wsa8845_firmware	Not reported	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	wsa8845h_firmware	Not reported	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	x2000077_firmware	Not reported	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	x2000086_firmware	Not reported	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	x2000090_firmware	Not reported	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	x2000092_firmware	Not reported	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	x2000094_firmware	Not reported	UnknownSource applicability is not established	Provider not reported

Original provider fields

{
  "package_releases": [],
  "fixed_versions": [],
  "distribution_packages": [
    {
      "name": "cologne_firmware",
      "fixed_version": "",
      "applicability_unknown": true
    },
    {
      "name": "fastconnect_6900_firmware",
      "fixed_version": "",
      "applicability_unknown": true
    },
    {
      "name": "fastconnect_7800_firmware",
      "fixed_version": "",
      "applicability_unknown": true
    },
    {
      "name": "qca0000_firmware",
      "fixed_version": "",
      "applicability_unknown": true
    },
    {
      "name": "sc8380xp_firmware",
      "fixed_version": "",
      "applicability_unknown": true
    },
    {
      "name": "snapdragon_ar1_gen_1_platform_firmware",
      "fixed_version": "",
      "applicability_unknown": true
    },
    {
      "name": "wcd9378c_firmware",
      "fixed_version": "",
      "applicability_unknown": true
    },
    {
      "name": "wcd9380_firmware",
      "fixed_version": "",
      "applicability_unknown": true
    },
    {
      "name": "wcd9385_firmware",
      "fixed_version": "",
      "applicability_unknown": true
    },
    {
      "name": "wsa8830_firmware",
      "fixed_version": "",
      "applicability_unknown": true
    },
    {
      "name": "wsa8832_firmware",
      "fixed_version": "",
      "applicability_unknown": true
    },
    {
      "name": "wsa8835_firmware",
      "fixed_version": "",
      "applicability_unknown": true
    },
    {
      "name": "wsa8840_firmware",
      "fixed_version": "",
      "applicability_unknown": true
    },
    {
      "name": "wsa8845_firmware",
      "fixed_version": "",
      "applicability_unknown": true
    },
    {
      "name": "wsa8845h_firmware",
      "fixed_version": "",
      "applicability_unknown": true
    },
    {
      "name": "x2000077_firmware",
      "fixed_version": "",
      "applicability_unknown": true
    },
    {
      "name": "x2000086_firmware",
      "fixed_version": "",
      "applicability_unknown": true
    },
    {
      "name": "x2000090_firmware",
      "fixed_version": "",
      "applicability_unknown": true
    },
    {
      "name": "x2000092_firmware",
      "fixed_version": "",
      "applicability_unknown": true
    },
    {
      "name": "x2000094_firmware",
      "fixed_version": "",
      "applicability_unknown": true
    },
    {
      "name": "cologne_firmware",
      "ranges": [],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21380",
      "fixed_version": "",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2026-21380",
      "provider_updated_at": "2026-10-25T23:10:00.167"
    },
    {
      "name": "fastconnect_6900_firmware",
      "ranges": [],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21380",
      "fixed_version": "",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2026-21380",
      "provider_updated_at": "2026-10-25T23:10:00.167"
    },
    {
      "name": "fastconnect_7800_firmware",
      "ranges": [],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21380",
      "fixed_version": "",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2026-21380",
      "provider_updated_at": "2026-10-25T23:10:00.167"
    },
    {
      "name": "qca0000_firmware",
      "ranges": [],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21380",
      "fixed_version": "",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2026-21380",
      "provider_updated_at": "2026-10-25T23:10:00.167"
    },
    {
      "name": "sc8380xp_firmware",
      "ranges": [],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21380",
      "fixed_version": "",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2026-21380",
      "provider_updated_at": "2026-10-25T23:10:00.167"
    },
    {
      "name": "snapdragon_ar1_gen_1_platform_firmware",
      "ranges": [],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21380",
      "fixed_version": "",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2026-21380",
      "provider_updated_at": "2026-10-25T23:10:00.167"
    },
    {
      "name": "wcd9378c_firmware",
      "ranges": [],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21380",
      "fixed_version": "",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2026-21380",
      "provider_updated_at": "2026-10-25T23:10:00.167"
    },
    {
      "name": "wcd9380_firmware",
      "ranges": [],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21380",
      "fixed_version": "",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2026-21380",
      "provider_updated_at": "2026-10-25T23:10:00.167"
    },
    {
      "name": "wcd9385_firmware",
      "ranges": [],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21380",
      "fixed_version": "",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2026-21380",
      "provider_updated_at": "2026-10-25T23:10:00.167"
    },
    {
      "name": "wsa8830_firmware",
      "ranges": [],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21380",
      "fixed_version": "",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2026-21380",
      "provider_updated_at": "2026-10-25T23:10:00.167"
    },
    {
      "name": "wsa8832_firmware",
      "ranges": [],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21380",
      "fixed_version": "",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2026-21380",
      "provider_updated_at": "2026-10-25T23:10:00.167"
    },
    {
      "name": "wsa8835_firmware",
      "ranges": [],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21380",
      "fixed_version": "",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2026-21380",
      "provider_updated_at": "2026-10-25T23:10:00.167"
    },
    {
      "name": "wsa8840_firmware",
      "ranges": [],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21380",
      "fixed_version": "",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2026-21380",
      "provider_updated_at": "2026-10-25T23:10:00.167"
    },
    {
      "name": "wsa8845_firmware",
      "ranges": [],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21380",
      "fixed_version": "",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2026-21380",
      "provider_updated_at": "2026-10-25T23:10:00.167"
    },
    {
      "name": "wsa8845h_firmware",
      "ranges": [],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21380",
      "fixed_version": "",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2026-21380",
      "provider_updated_at": "2026-10-25T23:10:00.167"
    },
    {
      "name": "x2000077_firmware",
      "ranges": [],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21380",
      "fixed_version": "",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2026-21380",
      "provider_updated_at": "2026-10-25T23:10:00.167"
    },
    {
      "name": "x2000086_firmware",
      "ranges": [],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21380",
      "fixed_version": "",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2026-21380",
      "provider_updated_at": "2026-10-25T23:10:00.167"
    },
    {
      "name": "x2000090_firmware",
      "ranges": [],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21380",
      "fixed_version": "",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2026-21380",
      "provider_updated_at": "2026-10-25T23:10:00.167"
    },
    {
      "name": "x2000092_firmware",
      "ranges": [],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21380",
      "fixed_version": "",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2026-21380",
      "provider_updated_at": "2026-10-25T23:10:00.167"
    },
    {
      "name": "x2000094_firmware",
      "ranges": [],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21380",
      "fixed_version": "",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2026-21380",
      "provider_updated_at": "2026-10-25T23:10:00.167"
    }
  ]
}

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

Observed: Oct 26, 2026, 2:52:15 AM UTC

References

[CERT-Bund public advisories] · [FIRST EPSS] · [National Vulnerability Database (NVD)]