{"id":"CVE-2026-57555","published":"2026-10-06T07:16:58.980","lastModified":"2026-10-09T14:12:46.737","description":"Memory Corruption when executing system service routines due to improper handling of user input buffers.","cvssScore":7.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-416"],"vendors":["qualcomm"],"products":["cologne firmware","cologne","fastconnect 6700 firmware","fastconnect 6700","fastconnect 6900 firmware","fastconnect 6900","fastconnect 7800 firmware","fastconnect 7800","iqx5121 firmware","iqx5121","iqx7181 firmware","iqx7181"],"references":[{"url":"https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2026-bulletin.html","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This vulnerability allows attackers with local user privileges to cause memory corruption when system service routines execute, potentially leading to arbitrary code execution. The flaw occurs due to improper handling of user input buffers during system service execution.","exploitability":"Exploitation requires local user access and is moderately difficult, needing precise control over input buffers to trigger the memory corruption during service routine execution.","blast_radius":"If exploited, this vulnerability could allow attackers to execute arbitrary code with system privileges on affected Qualcomm-based devices, potentially affecting multiple network services and device functionality.","remediation":"Upgrade to firmware version 2.590 or later for all affected devices including FastConnect 6700, 6900, and 7800 models.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["memory-corruption","local-privilege-escalation","firmware"],"model":"garnet-coder","analyzedAt":"2026-10-13T08:55:50.001Z"}}