EUVD-2026-19320

| CVE-2026-21367 HIGH
2026-04-06 qualcomm GHSA-78j8-w6rh-444w
7.6
CVSS 3.1
Share

CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
High
Privileges Required
High
User Interaction
Required
Scope
Changed
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

3
Analysis Generated
Apr 06, 2026 - 16:00 vuln.today
EUVD ID Assigned
Apr 06, 2026 - 16:00 euvd
EUVD-2026-19320
CVE Published
Apr 06, 2026 - 15:33 nvd
HIGH 7.6

Description

Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans.

Analysis

Out-of-bounds read in Qualcomm Snapdragon WiFi firmware triggers denial-of-service when processing malformed FILS Discovery frames during network scans. Remote attackers on the same wireless network can crash affected devices by broadcasting specially crafted 802.11ai Fast Initial Link Setup frames with invalid action field sizes. …

Sign in for full analysis, threat intelligence, and remediation guidance.

Remediation

Within 24 hours: Identify Snapdragon WiFi-enabled devices in inventory (mobile devices, IoT endpoints, automotive systems) and document affected firmware versions. Within 7 days: Implement wireless network segmentation to restrict access to 802.11ai FILS frames if possible through WiFi controller policies, and monitor for unexpected device disconnections. …

Sign in for detailed remediation steps.

Priority Score

38
Low Medium High Critical
KEV: 0
EPSS: +0.0
CVSS: +38
POC: 0

Share

EUVD-2026-19320 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy