Memory Corruption in Qualcomm Devices Due to Race Conditions
CVE-2026-24075

7.8HIGH

Key Information:

Vendor

Qualcomm
Status
Snapdragon
Vendor
CVE Published:
17 September 2026

What is CVE-2026-24075?

This vulnerability arises from improper synchronization in Qualcomm's device control handler, which allows multiple threads to issue concurrent IOCTL requests. The resultant race conditions can lead to memory corruption, posing a significant security risk to devices utilizing this handler. Proper safeguards and synchronization mechanisms are crucial to mitigate this flaw and ensure device integrity.

Affected Version(s)

Snapdragon Snapdragon Compute AQT1000

Snapdragon Snapdragon Compute Cologne

Snapdragon Snapdragon Compute FastConnect 6200

References

https://docs.qualcomm.com/product/publicresources/securit...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.