{"id":"CVE-2026-57559","published":"2026-10-06T07:16:59.123","lastModified":"2026-10-09T14:12:53.593","description":"Memory corruption while processing service requests.","cvssScore":7.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-416"],"vendors":["qualcomm"],"products":["cologne firmware","cologne","fastconnect 6700 firmware","fastconnect 6700","fastconnect 6900 firmware","fastconnect 6900","fastconnect 7800 firmware","fastconnect 7800","iqx5121 firmware","iqx5121","iqx7181 firmware","iqx7181"],"references":[{"url":"https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2026-bulletin.html","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A memory corruption vulnerability in Qualcomm's Cologne firmware allows attackers with local access to potentially execute arbitrary code or cause system instability when processing service requests. This affects multiple FastConnect chipsets and could lead to complete system compromise.","exploitability":"Exploitation requires local access to the affected device and is moderately difficult, needing a crafted service request payload to trigger the memory corruption that can be leveraged for code execution.","blast_radius":"The vulnerability impacts all affected FastConnect chipsets including 6700, 6900, and 7800 models, potentially affecting a wide range of networking equipment in enterprise and industrial environments where these chips are deployed.","remediation":"Upgrade to the latest available firmware version for affected FastConnect chipsets as soon as it becomes available from Qualcomm, or disable the service request processing functionality if immediate upgrade is not feasible.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["memory-corruption","local-access","embedded-systems"],"model":"garnet-coder","analyzedAt":"2026-10-13T08:55:40.631Z"}}