{"id":"CVE-2026-57537","published":"2026-10-06T07:16:58.300","lastModified":"2026-10-09T14:12:04.180","description":"Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.","cvssScore":7.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-416"],"vendors":["qualcomm"],"products":["congo firmware","congo","fastconnect 6200 firmware","fastconnect 6200","fastconnect 6900 firmware","fastconnect 6900","fastconnect 7800 firmware","fastconnect 7800","orne firmware","orne","pandeiro firmware","pandeiro"],"references":[{"url":"https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2026-bulletin.html","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This vulnerability is a memory corruption flaw that occurs when geographic mapping data is accessed and modified concurrently without proper synchronization, leading to potential arbitrary code execution or system instability. The issue affects Qualcomm-based networking devices and can be exploited by authenticated attackers.","exploitability":"Exploitation requires an authenticated attacker with access to the device's management interface, making it moderately difficult but not highly complex to achieve, with no additional preconditions beyond valid credentials.","blast_radius":"If exploited, this flaw could impact a wide range of Qualcomm-based networking devices including FastConnect 6200, 6900, and 7800 models, potentially affecting network infrastructure and connectivity for multiple users.","remediation":"Upgrade to firmware version 2.590 or later for all affected FastConnect devices (6200, 6900, 7800) and Congo devices.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["memory-corruption","networking","ics"],"model":"garnet-coder","analyzedAt":"2026-10-13T08:56:16.778Z"}}