CVE-2026-57546

nvd nist

Published: Oct 6, 2026Modified: Oct 9, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: product-security@qualcomm.com (Secondary)

Description

Transient DOS when processing a continuous receive command with a zero-sized global configuration override.

Affected (14)

Products: Qualcomm: Congo Firmware, Fastconnect 7800 Firmware, Orne Firmware, Pandeiro Firmware, Fastconnect 8800 Mobile Connectivity System Firmware, Sm8950 Firmware, Sm8950p Firmware, Sm8975 Firmware, Sm8975p Firmware, Wcd9378 Firmware, Wcd9395 Firmware, Wcn7880 Firmware, Wcn7881 Firmware, Wcn8841 Firmware

Qualcomm

14 products

Congo Firmware

Fastconnect 7800 Firmware

Orne Firmware

Pandeiro Firmware

Fastconnect 8800 Mobile Connectivity System Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Congo Firmware	All versions

Running on/with	Platform Versions
Qualcomm Congo	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Fastconnect 7800 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Fastconnect 7800	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Orne Firmware	All versions

Running on/with	Platform Versions
Qualcomm Orne	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Pandeiro Firmware	All versions

Running on/with	Platform Versions
Qualcomm Pandeiro	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Fastconnect 8800 Mobile Connectivity System Firmware	All versions

Running on/with	Platform Versions
Qualcomm Fastconnect 8800 Mobile Connectivity System	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm8950 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm8950	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm8950p Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm8950p	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm8975 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm8975	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm8975p Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm8975p	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcd9378 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcd9378	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcd9395 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcd9395	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcn7880 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcn7880	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcn7881 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcn7881	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcn8841 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcn8841	All versions

Related CWEs

CWE-126

Buffer Over-read

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

References (1)

https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2026-bulletin.html

Source: product-security@qualcomm.com

Vendor Advisory

Timeline

No history available yet.