# CVE-2026-57546: Qualcomm transient DoS on zero-sized global configuration override

Source: https://junglewise.ai/threats/cve-2026-57546-transient-dos-when-processing-a-continuous-receive-command-with-a  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-06. Updated: 2026-10-06  
License: CC BY 4.0 with a link back

CVE-2026-57546 · Severity: high · CVSS 7.5 · Published 2026-10-06

A Qualcomm component experiences a temporary denial of service when processing a continuous receive command paired with a zero-sized global configuration override. This causes the affected service to become unresponsive until the condition clears, potentially disrupting business operations that depend on continuous data reception.

Technologies: [Qualcomm <UNKNOWN>](https://junglewise.ai/threats/technologies/qualcomm-unknown). Vendors: [Qualcomm](https://junglewise.ai/threats/vendors/qualcomm).

## Quick answers

**Is CVE-2026-57546 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-57546 being exploited in the wild.

**How severe is CVE-2026-57546?** High severity, with a CVSS score of 7.5, published 6 October 2026.

**Which products and versions are affected?** Qualcomm <UNKNOWN>.

**Is there a fix for CVE-2026-57546?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-57546 attacked?** It is attacked over the network or with local access.

**Am I affected by CVE-2026-57546?** Check whether you run Qualcomm <UNKNOWN>. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A denial-of-service vulnerability in Qualcomm firmware occurs when a continuous receive command is processed alongside a zero-sized global configuration override parameter. The flaw causes transient unavailability of the affected component. An attacker with network or local access capable of sending specially crafted configuration commands can trigger this condition.

## Affected products

- Qualcomm <UNKNOWN>

## Timeline

- 2026-10-06: disclosed

## References

- [https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2026-bulletin.html](https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2026-bulletin.html)

## Related threats

- [Qualcomm memory corruption in service request processing](https://junglewise.ai/threats/cve-2026-57559-memory-corruption-while-processing-service-requests)
- [Qualcomm system service memory corruption in user input buffer handling](https://junglewise.ai/threats/cve-2026-57555-memory-corruption-when-executing-system-service-routines-due-to)
- [Qualcomm memory corruption in geographic mapping data synchronization](https://junglewise.ai/threats/cve-2026-57537-memory-corruption-when-accessing-and-modifying-geographic-mapping)
- [Qualcomm memory corruption in shared page list synchronization](https://junglewise.ai/threats/cve-2026-25291-memory-corruption-when-performing-concurrent-operations-on-shared)
- [Qualcomm DMA buffer memory corruption from unsynchronized allocation](https://junglewise.ai/threats/cve-2026-25274-memory-corruption-when-processing-concurrent-dma-buffer)