Cryptographic Issue in Qualcomm Products Vulnerable to Boot Flow Modification
CVE-2026-24090

7.1HIGH

Key Information:

Vendor

Qualcomm
Status
Snapdragon
Vendor
CVE Published:
1 June 2026

What is CVE-2026-24090?

A cryptographic vulnerability identified in Qualcomm products permits the unauthorized modification of partition table entries, potentially altering the boot flow. This flaw compromises the integrity of the device's boot process, leading to the risk of malicious modifications and unauthorized system access. Users should be aware of this issue and ensure their systems are updated to mitigate against potential exploitation.

Affected Version(s)

Snapdragon XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

References

https://docs.qualcomm.com/product/publicresources/securit...

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.