SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-64209

HIGH · CVSS 7.1 EPSS 0.12%

Source: NVD + CISA KEV + EPSS · Published 2026-07-24 · Last synced 2026-08-23

CyberRota Analysis

AI-Generated

A vulnerability in the Linux kernel affects the Qualcomm QMP USB-C driver, where an incorrect boundary check allows for out-of-bounds access in the dp swing configuration arrays. This flaw could potentially lead to memory corruption or system instability, making it a concern for developers and system administrators managing Linux environments, particularly those utilizing Qualcomm hardware. Prioritization is recommended for those operating in security-sensitive contexts or deploying systems that rely on this driver.

CVE
CVE-2026-64209
Severity
HIGH
CVSS
7.1
EPSS
0.12%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config swing_tbl and pre_emphasis_tbl are 4x4 arrays (valid indices 0-3), but the boundary check uses "> 4" instead of ">= 4", allowing index 4 to cause an out-of-bounds access.

Related CVEs

Other vulnerabilities affecting the same vendor(s)