Qualcomm Modem Input Validation Flaws Leading to Remote DoS (CVE-2026-21548 to CVE-2026-21555)

Security Advisory Summary Details CVE-2026-21548 Title: Improper Input Validation in nr modem Description: An issue of improper input validation exists in the nr modem. This may lead to remote denial of service, requiring system-level privileges. Technical Area: Modem Vulnerability Type: CWE-20 Improper Input Validation Attack Vector: Network CVSS Rating: High CVSS Score: 7.5 CVSS Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Chipsets: T8100/T9100/T8200/T8300 Affected Software Versions: Android 13/Android 14/Android 15/Android 16 CVE-2026-21549 Title: Improper Input Validation in modem Description: An issue of improper input validation exists in the modem. This may lead to remote denial of service, without requiring additional privileges. Technical Area: Modem Vulnerability Type: CWE-20 Improper Input Validation Attack Vector: Network CVSS Rating: High CVSS Score: 7.5 CVSS Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Chipsets: T8100/T9100/T8200/T8300 Affected Software Versions: Android 13/Android 14/Android 15/Android 16 CVE-2026-21550 Title: Improper Input Validation in modem Description: An issue of improper input validation exists in the modem. This may lead to remote denial of service, without requiring additional privileges. Technical Area: Modem Vulnerability Type: CWE-20 Improper Input Validation Attack Vector: Network CVSS Rating: High CVSS Score: 7.5 CVSS Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Chipsets: T8100/T9100/T8200/T8300 Affected Software Versions: Android 13/Android 14/Android 15/Android 16 CVE-2026-21551 Title: Improper Input Validation in modem Description: An issue of improper input validation exists in the modem. This may lead to remote denial of service, without requiring additional privileges. Technical Area: Modem Vulnerability Type: CWE-20 Improper Input Validation Attack Vector: Network CVSS Rating: High CVSS Score: 7.5 CVSS Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Chipsets: T8100/T9100/T8200/T8300 Affected Software Versions: Android 13/Android 14/Android 15/Android 16 CVE-2026-21552 Title: Improper Input Validation in modem Description: An issue of improper input validation exists in the modem. This may lead to remote denial of service, without requiring additional privileges. Technical Area: Modem Vulnerability Type: CWE-20 Improper Input Validation Attack Vector: Network CVSS Rating: High CVSS Score: 7.5 CVSS Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Chipsets: T8100/T9100/T8200/T8300 Affected Software Versions: Android 13/Android 14/Android 15/Android 16 CVE-2026-21553 Title: Improper Input Validation in modem Description: An issue of improper input validation exists in the modem. This may lead to remote denial of service, without requiring additional privileges. Technical Area: Modem Vulnerability Type: CWE-20 Improper Input Validation Attack Vector: Network CVSS Rating: High CVSS Score: 7.5 CVSS Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Chipsets: T8100/T9100/T8200/T8300 Affected Software Versions: Android 13/Android 14/Android 15/Android 16 CVE-2026-21554 Title: Improper Input Validation in modem Description: An issue of improper input validation exists in the modem. This may lead to remote denial of service, without requiring additional privileges. Technical Area: Modem Vulnerability Type: CWE-20 Improper Input Validation Attack Vector: Network CVSS Rating: High CVSS Score: 7.5 CVSS Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Chipsets: UDX710 Affected Software Versions: Yocto CVE-2026-21555 Title: Improper Input Validation in modem Description: An issue of improper input validation exists in the modem. This may lead to remote denial of service, without requiring additional privileges. Technical Area: Modem Vulnerability Type: CWE-20 Improper Input Validation Attack Vector: Network CVSS Rating: High CVSS Score: 7.5 CVSS Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Chipsets: UDX710 Affected Software Versions: Yocto Vulnerability Type Definitions Version History The list of affected chipsets may not be complete. For more information, device OEMs can contact support@unisoc.com directly.

Goal Reached Thanks to every supporter — we hit 100%!

Qualcomm Modem Input Validation Flaws Leading to Remote DoS (CVE-2026-21548 to CVE-2026-21555)