Cryptographic Issue in Qualcomm Products Vulnerable to Boot Flow Modification
CVE-2026-24090

7.1HIGH

Key Information:

Vendor

Qualcomm
Status
Snapdragon
Vendor
CVE Published:
1 June 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-24090?

A cryptographic vulnerability identified in Qualcomm products permits the unauthorized modification of partition table entries, potentially altering the boot flow. This flaw compromises the integrity of the device's boot process, leading to the risk of malicious modifications and unauthorized system access. Users should be aware of this issue and ensure their systems are updated to mitigate against potential exploitation.

Affected Version(s)

Snapdragon XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

Lenovo_Qcom_RPMB_Tool
Created by wnduddld0513

References

https://docs.qualcomm.com/product/publicresources/securit...

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.